Well, have spent the past few days trying to make a very simple AdTran configuration work with my Cisco 2851 router to serve as a T1 edge in my network. I'm pretty comfortable with IOS and have another T1 up and running, but in this case, the vendor uses CHAP rather than a fixed static / mapped frame relay IP set.
What looks pretty simple, seems not to be so. If anyone has any suggestions on how best to translate, I'd be grateful... Here is a sanitized version of the AdTran configuration:
======
config t
!
hostname "SomeHostName"
enable password somepassword
!
no ip firewall
!
ip subnet-zero
ip classless
ip routing
ipv6 unicast-routing
bridge irb
!
name-server 8.8.8.8 4.2.2.2
auto-config
!
event-history on
no logging forwarding
no logging email
!
no service password-encryption
!
username "somelocaluser" password "somepassword"
!
no ip firewall alg msn
no ip firewall alg mszone
no ip firewall alg h323
!
no dot11ap access-point-control
!
no ethernet cfm
!
interface eth 0/1
bridge-group 1
no ip address
no shutdown
!
interface eth 0/2
bridge-group 1
no ip address
no shutdown
!
interface t1 1/1
description FR
tdm-group 1 timeslots 1-24 speed 64
no shutdown
!
interface bvi 1
mac-address 00:00:00:00:43:76
ip address 10.0.1.1 255.255.255.0 ' Some actually routable IP (not really in the 10/8 range)
ip mtu 1500
no shutdown
!
Interface fr 1 point-to-point
frame-relay lmi-type ansi
no fair-queue
no shutdown
cross-connect 1 t1 1/1 1 frame-relay 1
!
Interface fr 1.1 point-to-point
frame-relay interface-dlci 16
description fr 1.1
snmp trap link-status
no ip address
ip mtu 1500
!
interface ppp 1
description PPP
ip address negotiated
no fair-queue
ppp chap hostname someremotehostname
ppp chap password someremotehostpass
no shutdown
cross-connect 2 frame-relay 1.1 ppp 1
!
!
ip route 0.0.0.0 0.0.0.0 frame-relay 1.1
!
no tftp server
no tftp server overwrite
no http server
http secure-server
no snmp agent
no ip ftp server
ip ftp server default-filesystem flash
no ip scp server
no ip sntp server
!
sip udp 5060
sip tcp 5060
!
line con 0
login
!
line telnet 0 4
login
password someotherpassword
shutdown
line ssh 0 4
login local-userlist
no shutdown
!
end
!
!
write
======
In my IOS translated version, I can't even seem to get the CHAP handshake to start between the edge and its upline. The AdTran is connecting using the above, and I am able to reach it and login looping around outside my network back into the router. A gateway of last resort appears to be setup and there is connectivity. The Cisco just does not want to make that first CHAP connection, although the Serial 0/1/0 is certainly showing all up when I do a "show int ser 0/1/0", so I gather at least at a hardware level things are working.
As I understand, the Serial 0/1/0 keeps more of the configuration, rather than splitting things out into separate PPP / FR interfaces. I suppose ultimately I could just bridge between the supplied edge and my Cisco for the IOS features we use to filter and protect our network, but I'd kind of like to be able to do that from one Cisco box, given I know it can do such things.
Any thoughts or translation assistance here would be appreciated.
