Any successful ADSL2+ connection to Sonic.net with 887Va?

[gwmarsh]

I am in Cisco 887Va-k9  hell insofar as my Sonic connection goes.  There is some network connectivity - I can connect to Cisco at 10.10.10.0 and get their tech support configuration file but no internet.  Sonic sees the connection and verifies the static ip address is correct.  Sonic does not use point to point but rather DHCP atm.  There are lots of configuration samples on the web of PPP but not the Sonic.  There could be an interoperability problem between the 887Va and the Sonic DSLAM.  Has anybody got this modem-router to work with Sonic ADSL2+?   

[gwmarsh]

I have progressed a little farther with this project.  I found a Cisco configuration guide for my situation which should work but does not and I believe it is due to the perhaps somewhat unique nature of the C887Va-k9 modem router I have.  Here is the link to the configuration guide:

https://www.cisco.com/c/en/us/support/docs/long-reach-ethernet-lre-digital-subscriber-line-xdsl/asymmetric-digital-subscriber-line-adsl/71104-adslguide-irb-staticstep.html

I am using a Sonic.net static ip address with atm DHCP LLC/SNAP and ith RFC 1483 IRB bridging.  This guide seems to fit those specs but it wants to place the static ip address and related DHCP address lines on ethernet0.  Due to the nature of the C887Va-k9 vdsl0 controller ethernet0 is shutdown when the POTS line is connected to an ADSL2+ source.  I have tried to place those ip files on other interfaces - atm0, bvi1, and vlan1 - unsuccessfully.  I think vlan1 is where the static ip address should probably be placed due to layer 3 but likely I am missing some other important configuration entries due to my extreme noobie ignorance.

Any ideas?

Many thanks.

[Georg Pauwen]

Hello,

post the config you have so far...

[gwmarsh]

I will, but it will take a few days as I put the modem away and I will have to relearn how to copy the configuration probably with HyperTerminal since it is hard to get CCP to discover the modem with my most recent configuration.  The CCP is a lot easier to use than HyperTerminal.

Thanks.

[gwmarsh]

Hope this works:

Using 2258 out of 262136 bytes
!
! Last configuration change at 23:56:35 UTC Sat Feb 23 2019
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$WBx0$ikKqL4pWV2kYWv8fUKQKX/
enable password
!
no aaa new-model
!
crypto pki trustpoint TP-self-signed-3046513841
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3046513841
--More--   revocation-check none
--More--   rsakeypair TP-self-signed-3046513841
--More--  !
--More--  !
--More--  crypto pki certificate chain TP-self-signed-3046513841
--More--   certificate self-signed 01 nvram:IOS-Self-Sig#1.cer
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  
--More--  
--More--  !
--More--  ip dhcp excluded-address 75.101.46.9
--More--  !
--More--  ip dhcp pool synopool
--More--   network 75.0.0.0 255.0.0.0
--More--   default-router 75.101.46.9
--More--   dns-server 208.201.224.11 208.201.224.33
--More--  !
--More--  !
--More--  !
--More--  ip cef
--More--  no ipv6 cef
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  multilink bundle-name authenticated
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  cts logging verbose
--More--  license udi pid C887VA-K9 sn FGL21022373
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  controller VDSL 0
--More--   modem exit
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  bridge irb
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  interface ATM0
--More--   no ip address
--More--   no atm ilmi-keepalive
--More--   cdp enable
--More--   bridge-group 1
--More--   pvc 0/35
--More--   encapsulation aal5snap
--More--   !
--More--  !
--More--  interface Ethernet0
--More--   no ip address
--More--   shutdown
--More--  !
--More--  interface FastEthernet0
--More--   no ip address
--More--  !
--More--  interface FastEthernet1
--More--   no ip address
--More--   shutdown
--More--  !
--More--  interface FastEthernet2
--More--   no ip address
--More--   shutdown
--More--  !
--More--  interface FastEthernet3
--More--   no ip address
--More--   shutdown
--More--  !
--More--  interface Vlan1
--More--   ip address 75.101.46.9 255.255.255.0
--More--  !
--More--  interface BVI1
--More--   ip address dhcp client-id Vlan1
--More--  !
--More--  ip forward-protocol nd
--More--  ip http server
--More--  ip http authentication local
--More--  ip http secure-server
--More--  ip http timeout-policy idle 60 life 86400 requests 10000
--More--  !
--More--  !
--More--  ip route profile
--More--  !
--More--  !
--More--  snmp-server community public RO
--More--  !
--More--  control-plane
--More--  !
--More--  bridge 1 protocol ieee
--More--  bridge 1 route ip
--More--  !
--More--  mgcp behavior rsip-range tgcp-only
--More--  mgcp behavior comedia-role none
--More--  mgcp behavior comedia-check-media-src disable
--More--  mgcp behavior comedia-sdp-force disable
--More--  !
--More--  mgcp profile default
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--   vstack
--More--  !
--More--  line con 0
--More--   no modem enable
--More--  line aux 0
--More--  line vty 0 4
--More--   privilege level 15
--More--   password kokomo2
--More--   login local
--More--   transport input telnet ssh
--More--   transport output telnet ssh
--More--  line vty 5 15
--More--   login local
--More--   transport input telnet ssh
--More--   transport output telnet ssh
--More--  !
--More--  scheduler allocate 20000 1000
--More--  !
--More--  !
--More--  !
--More--  end
--More--  

I could not find a flash .bin file more recent than the one shown - maybe Cisco has granted more level 3 "powers" to the hardware interfaces in the most recent versions.  Sometimes I can assign a static ip address to atm0 and sometimes I cannot as only level 2.

[gwmarsh]

Sorry, layer 2 and 3 not level privileges

[Georg Pauwen]

Hello,

I have made some changes and additions (marked in bold) to your configuration, see if you get it to work. You need to get to the command line in order to enter the commands, as the web interface gets rather tedious:

Using 2258 out of 262136 bytes
!
! Last configuration change at 23:56:35 UTC Sat Feb 23 2019
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$WBx0$ikKqL4pWV2kYWv8fUKQKX/
enable password
!
no aaa new-model
!
crypto pki trustpoint TP-self-signed-3046513841
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3046513841
revocation-check none
rsakeypair TP-self-signed-3046513841
!
crypto pki certificate chain TP-self-signed-3046513841
certificate self-signed 01 nvram:IOS-Self-Sig#1.cer
!
ip dhcp excluded-address 75.101.46.9
!
ip dhcp pool synopool
network 75.0.0.0 255.0.0.0
default-router 75.101.46.9
dns-server 208.201.224.11 208.201.224.33
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
cts logging verbose
license udi pid C887VA-K9 sn FGL21022373
!
controller VDSL 0
operating mode adsl2+
!
bridge irb
!
interface ATM0
no ip address
no atm ilmi-keepalive
cdp enable
!
interface ATM0.1 point-to-point
pvc 0/35
encapsulation aal5snap
bridge-group 1

!

interface Ethernet0
no ip address

shutdown
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
shutdown
!
interface FastEthernet2
no ip address
shutdown
!
interface FastEthernet3
no ip address
shutdown
!
interface Vlan1
ip address 75.101.46.9 255.0.0.0
ip nat inside
!
interface BVI1
ip address dhcp client-id Vlan1
ip nat outside
!
ip nat inside source list 1 interface BVI1 overload
!
access-list 1 permit 75.0.0.0 0.255.255.255
!
ip route 0.0.0.0 0.0.0.0 BVI1 dhcp
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip route profile
!
snmp-server community public RO
!
control-plane
!
bridge 1 protocol ieee
bridge 1 route ip
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
vstack
!
line con 0
no modem enable
line aux 0
line vty 0 4
privilege level 15
password kokomo2
login local
transport input telnet ssh
transport output telnet ssh
line vty 5 15
login local
transport input telnet ssh
transport output telnet ssh
!
scheduler allocate 20000 1000
end

[paul driver]

Hello

Just like to add on a few pointers _

1) Wouldnt recommend using a lan dhcp pool with public addressing
2) Changing the controller mode require a reload of the rtr ( auto is recommended which isnt shown when enabled)
3) The BVI interface is set to obtain address via dhcp but it stating a client id of the mac address for the vlan 1, shouldnt this be the ATM interface?

[gwmarsh]

Thank you

This device is very tricky - I have manually selected ADSL2+ before without noticeable effect.

What puzzles me about this modem is the .bin software and what it permits one to do.  Sometimes it gets all upset about layer 2 powers and sometimes it allows a static ip address to be assigned to atm0.  Quirky.  Anyone know if the latest version of the .bin software has changed access to the hardware via the configuration?  Somehow I see vlan1 as the crux here and it needs "coddling" to achieve full functionality?

[gwmarsh]

#3 might be on to something but I am not sure how to proceed.  This is a small in the house network with a few printers, a WAP, a couple PC's, and a switch.  So I am not worried about security but ease of use.  Everything is on hard-wired ethernet cable except the WAP for the wife and kids stuff.

[gwmarsh]

Thanks - I'll get on this today.  I see your PPP line - I had a feeling something might be necessary with this device which seems to be highly optimized for PPP.

[gwmarsh]

Hi

i tried out the configuration, probably the harder way by copying your additions into the existing config.  After a few mistypes I copied to host via HyperTerminal and it went down fairly well with the exception of the ATM0.1 entry.  The .bin software was not happy with the bridge-group 1 fourth line on this interface.  The objection read (config-if-atm-vc)# bridge-group 1 "Configuration of subinterfaces and main interface within the same bridge group is not permitted."

So I tried placing the bridge-group 1 line on ATM0 with the result of same message and pvc 0/35 and encapsulation aal5snap were moved to ATM0.  So trying to save the P-to-P concept I kept that ATM0.1 line by itself and it was copied to host.

The upside is I never got so much connectivity before when I popped in the POTS line.  CCP timed out in the discovery and I could not get thru to 10.10.10.1.

But I called Sonic support straightaway and they said it was synching and they saw apparently simulaneous attempts to access 2 ip addresses - the static ip address and a DHCP address like 0.0.0.0.  But I never enjoyed so much connectivity so far - right off about 4,000 packets sent and 1,400 received.   So there's hope the Sonic DSLAM will work with the C887Va-k9.  Why is the .bin software so restrictive?  Does this device have some features crippled?

Thanks very much for your help

[gwmarsh]

I tried some other changes today   - I dropped the ATM0.1 entry and changed the 0.0.0.0 0.0.0.0 in "ip route 0.0.0.0 0.0.0.0 BVI1 dhcp" to the my Sonic default gateway.  That appears in the Cisco step-by-step configuration guide.  Worth a try but no luck - less connectivity than ever.

I am wondering how to get ATM0.1 back into play?  Maybe BVI2?

Thanks

[gwmarsh]

I made another attempt at configuring the C887Va-k9 for Sonic atm DHCP with RFC 1483 irb bridging:

show config
Using 2471 out of 262136 bytes
!
! Last configuration change at 23:26:11 UTC Mon Mar 18 2019
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname
!
boot-start-marker
boot-end-marker
!
!
no logging console
enable secret 5 $1$tzzt$D4g1.3Fo5rMoSR3bbPe4F.
enable password
!
no aaa new-model
!
crypto pki trustpoint TP-self-signed-3046513841
enrollment selfsigned
--More--   subject-name cn=IOS-Self-Signed-Certificate-3046513841
--More--   revocation-check none
--More--   rsakeypair TP-self-signed-3046513841
--More--  !
--More--  !
--More--  crypto pki certificate chain TP-self-signed-3046513841
--More--   certificate self-signed 01 nvram:IOS-Self-Sig#1.cer
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  
--More--  
--More--  !
--More--  ip dhcp excluded-address 75.101.46.9
--More--  !
--More--  ip dhcp pool synopool
--More--   network 75.0.0.0 255.0.0.0
--More--   default-router 75.101.46.9
--More--   dns-server 208.201.224.11 208.201.224.33
--More--  !
--More--  !
--More--  !
--More--  ip cef
--More--  no ipv6 cef
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  multilink bundle-name authenticated
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  cts logging verbose
--More--  license udi pid C887VA-K9 sn FGL21022373
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  controller VDSL 0
--More--   operating mode adsl2+
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  bridge irb
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  interface ATM0
--More--   no ip address
--More--   no atm ilmi-keepalive
--More--   cdp enable
--More--   bridge-group 1
--More--   pvc 0/35
--More--   encapsulation aal5snap
--More--   !
--More--  !
--More--  interface ATM0.1 point-to-point
--More--   ip address 75.101.46.9 255.255.255.0
--More--  !
--More--  interface Ethernet0
--More--   no ip address
--More--   shutdown
--More--  !
--More--  interface FastEthernet0
--More--   no ip address
--More--  !
--More--  interface FastEthernet1
--More--   no ip address
--More--  !
--More--  interface FastEthernet2
--More--   no ip address
--More--  !
--More--  interface FastEthernet3
--More--   no ip address
--More--  !
--More--  interface Vlan1
--More--   ip address dhcp
--More--   ip nat inside
--More--   ip virtual-reassembly in
--More--  !
--More--  interface BVI1
--More--   no ip address
--More--   ip nat inside
--More--   ip virtual-reassembly in
--More--  !
--More--  ip forward-protocol nd
--More--  ip http server
--More--  ip http authentication local
--More--  ip http secure-server
--More--  ip http timeout-policy idle 60 life 86400 requests 10000
--More--  !
--More--  !
--More--  ip route profile
--More--  ip route 0.0.0.0 0.0.0.0 Vlan1 dhcp
--More--  !
--More--  !
--More--  snmp-server community yes RO
--More--  access-list 1 permit 75.0.0.0 0.255.255.255
--More--  !
--More--  control-plane
--More--  !
--More--  bridge 1 protocol ieee
--More--  bridge 1 route ip
--More--  !
--More--  mgcp behavior rsip-range tgcp-only
--More--  mgcp behavior comedia-role none
--More--  mgcp behavior comedia-check-media-src disable
--More--  mgcp behavior comedia-sdp-force disable
--More--  !
--More--  mgcp profile default
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--  !
--More--   vstack
--More--  !
--More--  line con 0
--More--   no modem enable
--More--  line aux 0
--More--  line vty 0 4
--More--   privilege level 15
--More--   password
--More--   login local
--More--   transport input telnet ssh
--More--   transport output telnet ssh
--More--  line vty 5 15
--More--   privilege level 15
--More--   login local
--More--   transport input telnet ssh
--More--   transport output telnet ssh
--More--  !
--More--  scheduler allocate 20000 1000
--More--  !
--More--  !
--More--  !
--More--  end
--More--  

I did manage to set the static ip address on atm0.1 - "mirabile dictu"  Theoretically this configuration should seem to approach the right one.  Sonic sees the ip address clearly but there seems to another interface with a mac address trying to access the isp via the POTS line.  I thought it might be bvi1 so I made it no ip address and not on the ip route.

Anyone see what I am doing wrong or missing?

Thanks