cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4918
Views
4
Helpful
24
Replies

PPPoE configuration - no PADI recieved

kolomja3
Level 1
Level 1

Hey guys,

I'm trying to setup my home internet on Cisco router. ISP is via PPPoE connection - NBN HFC (cable modem). Router gets stuck on sending PADI packet and it never gets reply from server. I've captured some packets with Wireshark (I've established direct Dial-up connection on my laptop) and there is Cisco router on ISP side (according to MAC address). 

Here is my configuration and debug:

interface GigabitEthernet1
no ip address

pppoe enable group 42
pppoe-client dial-pool-number 42

no shutdown


interface Dialer1
mtu 1492
ip address negotiated
encapsulation ppp
dialer pool 42
dialer-group 42
ppp authentication chap callin
ppp chap hostname MY_ISP_NAME
ppp chap password MY_ISP_PASSWORD
!

dialer-list 42 protocol ip permit

ip route 0.0.0.0 0.0.0.0 Dialer1

I've enabled

debug pppoe packets

debug pppoe errors

debug pppoe events but 

*Feb 28 04:44:04.299: Sending PADI: Interface = GigabitEthernet1
*Feb 28 04:44:04.299: pppoe_send_padi:
contiguous pak, size 60
FF FF FF FF FF FF 64 3A EA 02 18 21 88 63 11 09
00 00 00 10 01 01 00 00 01 03 00 08 6A 00 00 01
00 00 1F 17 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00R800#sh pppoe session
1 client session

Uniq ID PPPoE RemMAC Port VT VA State
SID LocMAC VA-st Type
N/A 0 0000.0000.0000 Gi1 Di1 N/A PADISNT
0000.0000.0000

IR800#ping 8.8.8.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:

*Feb 28 05:09:31.699: Di1 DDR: ip (s=127.1.3.2, d=8.8.8.8), 100 bytes, outgoing interesting (ip PERMIT)
*Feb 28 05:09:31.699: Di1 DDR: Cannot place call, no dialer string set.
*Feb 28 05:09:33.700: Di1 DDR: ip (s=127.1.3.2, d=8.8.8.8), 100 bytes, outgoing interesting (ip PERMIT)
*Feb 28 05:09:33.700: Di1 DDR: Cannot place call, no dialer string set.
*Feb 28 05:09:35.700: Di1 DDR: ip (s=127.1.3.2, d=8.8.8.8), 100 bytes, outgoing interesting (ip PERMIT)
*Feb 28 05:09:35.700: Di1 DDR: Cannot place call, no dialer string set.

It's sending PADI frame out of correct interface as broadcast message but it never gets reply from svr.

I've tried cloning int G1 MAC address on my TP-Link router and it works. It doesn't look like issue on ISP side. I've verified with ISP that I can use CHAP authentication as well.

 

Any ideas why the router never gets reply from the server? Do I need to include vpdn config.?

 

 

 

24 Replies 24

Technical support from ISP is saying that tagging is required but they did
not sound very confident. I have Wireshark packet capture when I establish
Dial-Up connection with my laptop

OOOO OOO always with this case 
ISP say there is no problem and finally we discover that problem for their side. 
I will run lab many cases 
review these cases to be more ack when you talk with ISP next time 
I will share cases today I hope 

Can you post show version (complete output) - there may be some Limitations of the model you have.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Cisco IOS Software, ir800 Software (ir800-UNIVERSALK9-M), Version 15.7(3)M4b, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2019 by Cisco Systems, Inc.
Compiled Tue 07-May-19 17:22 by prod_rel_team

ROM: Bootstrap program is IR800

IR800 uptime is 9 minutes
System returned to ROM by Power-on at 03:52:22 UTC Fri Mar 3 2023
System image file is "flash:ir800-universalk9-mz.SPA.157-3.M4b"
Last reload reason: Power-on

 

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco IR829GW-LTE-GA-ZK9 (revision 2.0) with 365568K/60416K bytes of memory.
Processor board ID FGL2436L87A
Last reset from Power-on

FPGA version: 2.9.0

BIOS: version 24 Production
BIOS: date[YYYY/MM/DD] :[2019/4/17]

MCU Bootloader : 28
MCU Application: 33

2 Serial(sync/async) interfaces
7 Gigabit Ethernet interfaces
9 terminal lines
2 Cellular interfaces
1 cisco Embedded AP (s)
DRAM configuration is 72 bits wide with parity disabled.
256K bytes of non-volatile configuration memory.
976562K bytes of ATA System Flash (Read/Write)
250000K bytes of ATA Bootstrap Flash (Read/Write)


License Info:

License UDI:

-------------------------------------------------
Device# PID SN
-------------------------------------------------
*1 IR829GW-LTE-GA-ZK9 FGL2436L87A

 


Suite License Information for Module:'ir800'

--------------------------------------------------------------------------------
Suite Suite Current Type Suite Next reboot
--------------------------------------------------------------------------------

Technology Package License Information for Module:'ir800'

------------------------------------------------------------------------
Technology Technology-package Technology-package
Current Type Next reboot
------------------------------------------------------------------------
ipbase ipbasek9 Permanent ipbasek9
security securityk9 Permanent securityk9
data datak9 Permanent datak9

Configuration register is 0x102


hostname IOU2
!
ip dhcp excluded-address 1.0.0.1
ip dhcp excluded-address 10.0.0.1
!
ip dhcp pool mhm
network 1.0.0.0 255.255.255.0
!
ip dhcp pool mhm10
network 10.0.0.0 255.255.255.0
!
username mhm password 0 mhm
username mhm10 password 0 mhm10
!
bba-group pppoe mhm
virtual-template 1
!
bba-group pppoe mhm10
virtual-template 10
!
interface Ethernet0/0.1
encapsulation dot1Q 1 native
pppoe enable group mhm
!
interface Ethernet0/0.10
encapsulation dot1Q 10
pppoe enable group mhm10
!
interface Virtual-Template1
ip address 1.0.0.1 255.255.255.0
peer default ip address dhcp-pool mhm
ppp authentication pap
ppp pap sent-username Ser password 0 mhm
!
interface Virtual-Template10
ip address 10.0.0.1 255.255.255.0
peer default ip address dhcp-pool mhm10
ppp authentication pap
ppp pap sent-username Ser password 0 mhm10
!
end


hostname R1
!
username Ser password 0 mhm
!
interface FastEthernet0/0
no ip address
duplex half
pppoe enable group mhm
pppoe-client dial-pool-number 1
!
interface Dialer1
ip address negotiated
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication pap
ppp pap sent-username mhm password 0 mhm
!
dialer-list 1 protocol ip permit
!
end


hostname R2
!
username Ser password 0 mhm10
!
interface FastEthernet0/0
no ip address
duplex half
pppoe enable group global
pppoe-client dial-pool-number 10
pppoe-client dial-pool-number 1
!
interface Dialer10
ip address negotiated
encapsulation ppp
dialer pool 10
dialer-group 10
ppp authentication pap
ppp pap sent-username mhm10 password 0 mhm10
!
dialer-list 10 protocol ip permit
!
end

I run lab using two group and one using VLAN1 untag and other times using VLAN10 tag 

so Sure the PPPoE server (ISP) must provide you the VLAN tag and group name for your PPPoE. 

 

Screenshot (355).png

Finally I found working configuration:

interface GigabitEthernet1
switchport mode trunk
no ip address
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
pppoe enable group global
pppoe-client dial-pool-number 1
!
i
interface Dialer1
mtu 1492
ip address negotiated
ip mtu 1452
ip nat outside
ip virtual-reassembly in
encapsulation ppp
dialer pool 1
dialer-group 1
ppp chap hostname XXXX
ppp chap password  YYYYY
ppp ipcp dns request accept
!
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat inside source list 1 interface Dialer1 overload
ip route 0.0.0.0 0.0.0.0 Dialer1

I an so glad you issue solve finally

And I hope my answer help you in way to find solution.

Good job friend 

Have a nice day

MHM