Re: configure CISCO881GW router to use APN with no user name and pas

gddl630.cisco · ‎12-18-2009

Hi there,

I am trying to configure the above router to establish 3G connection, but we are based in UK and our provider three.co.uk has supplied us with ONLY APN: 3internet - we are NOT meant to use user name or password and we have asked them, but they can't provide us with one..., but the router seems to require it?!?

when configuring the router I get these "% Incomplete command" messages

Should I assume that the router can ONLY be used with APNs that have user names and passwords?

CISCO881GW(config)#interface cellular 0
CISCO881GW(config-if)#ppp chap hostname
% Incomplete command.

CISCO881GW(config-if)#ppp chap password 0
% Incomplete command.

CISCO881GW#cellular 0 gsm profile create 1 3internet chap
% Incomplete command.

CISCO881GW(config-line)#login
% Login disabled on line 3, until 'password' is set

Any help appreciated

CISCO881GW#sh cellular 0 profile 1
Profile 1 = INACTIVE*
--------
PDP Type = IPv4
Access Point Name (APN) = 3internet
Authentication = None
Username: , Password:

* - Default profile

chat-script gsm "" "ATDT*98*1#" TIMEOUT 60 "CONNECT"

!
interface Cellular0
ip address negotiated
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
encapsulation ppp
dialer in-band
dialer string gsm
dialer-group 1
async mode interactive
!

!

line 3
exec-timeout 0 0
script dialer gsm
login
modem InOut
no exec
speed 384000

!

paolo bevilacqua · ‎12-18-2009

As long the ISP does not request authentication, the chap commands are optional.

You can verify that with "debug ppp auth" and "term mon".

gddl630.cisco · ‎12-18-2009

i can use this SIM card in another non-cisco router with no problem - only APN is needed with no user name and password

I do however see auth required below:

000698: *Dec 18 15:41:41.395 PCTime: %LINK-3-UPDOWN: Interface Cellular0, changed state to up
000699: *Dec 18 15:41:41.395 PCTime: %DIALER-6-BIND: Interface Ce0 bound to profile Di1
000700: *Dec 18 15:41:41.395 PCTime: Ce0 PPP: Using dialer call direction
000701: *Dec 18 15:41:41.395 PCTime: Ce0 PPP: Treating connection as a callout
000702: *Dec 18 15:41:41.395 PCTime: Ce0 PPP: Session handle[A9000065] Session id[34]
000703: *Dec 18 15:41:41.395 PCTime: Ce0 PPP: Authorization required
000704: *Dec 18 15:41:41.395 PCTime: Ce0 PPP: No remote authentication for call-out
000705: *Dec 18 15:41:41.399 PCTime: Ce0 PPP: No authorization without authentication
000706: *Dec 18 15:41:41.399 PCTime: Ce0 CHAP: I CHALLENGE id 1 len 35 from "UMTS_CHAP_SRVR"
000707: *Dec 18 15:41:41.399 PCTime: Ce0 CHAP: Unable to authenticate for peer
000708: *Dec 18 15:41:41.403 PCTime: TTY3: Async Int reset: Dropping DTR

paolo bevilacqua · ‎12-18-2009

Try configuring a dummy password.

dvanhoyweghen · ‎02-02-2010

Hi,

Did You find a solution for your problem ?

If yes, please can You send me the working configuration , so I can try it here in Belgium.

Best regards

Dirk

philip daly · ‎01-08-2014

Try

int cel 0

ppp chap refuse

MatA · ‎02-17-2018

Hi,

Did this problem ever get resolved?

I am facing EXACTLY the same problem. ie. Same Carrier, same Router, same Country. - Same problem.

Georg Pauwen · ‎02-17-2018

Hello,

which country, Belgium or the UK ? Which provider ? Post the config you currently have...

MatA · ‎02-22-2018

Hi,

I am located in the UK. I have had several goes at getting this working using configs I have found on the web, none have worked. Also Three do not need Chap authentication, it uses the APN and connecting number to authenticate. (Unfortunately) I am starting out with routing/switching and am studying for ICND2.

This Router came up at a good price as something that "Could" be useful for a radio project I am involved in allowing for a 3G connection to a remote site. However it is proving non-co-operative compaired to a retail 3g router that is simply plug in sim, plug in PC and it works. (only has USB so no good for connecting two devices to the net.

On line Three list two APN names to use, the former is the one widely advertised, the latter took a bit of digging through a "Chinglish" manual that came with the USB router this is the one that is working with the USB router!

APN:

three.co.uk

3internet

I created the following Cellular profiles to try.

Router#sh cellular 0 profile

Profile 1 = INACTIVE* **
--------
PDP Type = IPv4
Access Point Name (APN) = three.co.uk
Authentication = None
Username:
Password:

Profile 2 = INACTIVE
--------
PDP Type = IPv4
Access Point Name (APN) = 3internet
Authentication = None
Username:
Password:

I cannot get any of these profiles to go active, but I am not sure if this is because I messed up in the configs.

I downloaded the config off the router last night, it too is in a sorry state as I have ripped a lot of it out but hopefully it is enough to allow someone to provide me with some guidance.

For information. Vlan200 is my access vlan. I am aware I need to set up a static route and some NAT but as I could not get Cellular 0 to connect I have not progressed this bit yet.

-------------------

no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
ethernet lmi ce
memory-size iomem 10
!
crypto pki trustpoint TP-self-signed-199739xxxx
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-19973xxxxx
revocation-check none
rsakeypair TP-self-signed-199739xxxx
!
!
crypto pki certificate chain TP-self-signed-1997390140
certificate self-signed 01
!

!
!
!
ip cef
no ipv6 cef
!
!
multilink bundle-name authenticated
chat-script gsm "" "1" TIMEOUT 60
license udi pid CISCO881G-K9 sn FCZ1432xxxx
!
!
username xxxxxxxx priv 15 secret xxxx
!
!
!
!
!
controller Cellular 0
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0
description *** LAN CONNECTION **
switchport access vlan 200
no ip address
duplex full
speed 100
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface FastEthernet4
no ip address
shutdown
duplex auto
speed auto
!
interface Cellular0
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation ppp
dialer in-band
dialer idle-timeout 0
dialer string gsm
dialer-group 1
async mode interactive
auto discovery qos
!
interface Vlan1
no ip address
!
interface Vlan200
ip address dhcp
!
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
ip route 0.0.0.0 0.0.0.0 Cellular0
!
!
!
control-plane
!
!
vstack
!
line con 0
no modem enable
line aux 0
line 3
exec-timeout 0 0
script dialer gsm
modem InOut
no exec
transport input all
rxspeed 7200000
txspeed 2000000
line vty 0 4
login
transport input none
!
!
end

----------------

Any help and guidance for this newbee would be most welcome

Mat

Georg Pauwen · ‎02-22-2018

Hello,

try 'slip' encapsulation on your cellular interface. I have revised your config a bit and added two different chat scripts, enter either one of them and see if you get it to work:

no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no aaa new-model
ethernet lmi ce
memory-size iomem 10
!
crypto pki trustpoint TP-self-signed-199739xxxx
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-19973xxxxx
revocation-check none
rsakeypair TP-self-signed-199739xxxx
!
crypto pki certificate chain TP-self-signed-1997390140
certificate self-signed 01
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
chat-script gsm "" "ATDT*99#" TIMEOUT 60 "CONNECT"
chat-script gsm "" "ATDT#777" TIMEOUT 60 "CONNECT"
!
license udi pid CISCO881G-K9 sn FCZ1432xxxx
!
username xxxxxxxx priv 15 secret xxxx
!
controller Cellular 0
!
interface FastEthernet0
description *** LAN CONNECTION **
switchport access vlan 200
no ip address
duplex full
speed 100
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface FastEthernet4
no ip address
shutdown
duplex auto
speed auto
!
interface Cellular0
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation slip
dialer in-band
dialer idle-timeout 0
dialer string gsm
dialer-group 1
async mode interactive
auto discovery qos
!
interface Vlan1
no ip address
!
interface Vlan200
ip address dhcp
!
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip route 0.0.0.0 0.0.0.0 Cellular0
!
dialer-list 1 protocol ip permit
!
control-plane
!
vstack
!
line con 0
no modem enable
line aux 0
line 3
exec-timeout 0 0
script dialer gsm
modem InOut
no exec
transport input all
rxspeed 7200000
txspeed 2000000
line vty 0 4
login
transport input none
!
end

MatA · ‎02-23-2018

Hi,

Thanks for the help so far, unfortunately the router does not support SLIP only PPP.

the two versions of the chat-script seem to have no affect.

I see the Cellular port go up/up and after 5 mins or so I see the modem go up/up which looked promising, but I am not seen any DHCP actvity from the ISP.

Oh, to add to this, I know the SIM is good as in a Cell phone, it does connect to 3g okay.

The "Three" network does not need any chap details, just the APN.

The other thing, I am not seeing the profile 1 change to active. should it ?

Mat

Georg Pauwen · ‎02-23-2018

Hello Mat,

from your debug output, it looks like a username is expected. Configure:

username UMTS_CHAP_SRVR

on the router.

MatA · ‎02-26-2018

Hi, No adding the username did not work :(

If I get time tonight (UK). I will grab the config as it now stands.

The current status as I am aware is the modem profile (1) is not becoming active.

although the console messages show the modem being in an up/up state, it still does not list the profile

as active.

although at this point its not important to note that it is not resolving an IP from the ISP which simply confirms its not connecting.

The Modem "Card" has a blue flashing 3g indicator on it, and the RSSI indicator is flashing around 3 flashes a second. I have an external (to the building) 3G 3db antenna, although If I can get hold of one I am looking to replace this to improve signal (its at aroun 81dbm at the moment). This maybe the issue? although the home USB router seem to connect ok. (I am not sure the sensivity of the Modem so cannot really compare them).

I will state again, the ISP report that no username/login is needed as it authenticates against the phone number associated with the SIM Card. The Sim is live and works in the USB modem.

Thanks to everyone who has spent time helping me, it's a good way to learn!

Config and logs will follow I hope very soon.

Mat

Georg Pauwen · ‎02-26-2018

Hello,

with the username added to your configuration, can you post the output of:

debug ppp authentication

debug ppp negotiation

For the sake of clarity, I have added the NAT configuration to your router as well (better give interface Vlan 200 an IP adddress, this has to match the access list 1). Try the dfferent chat scripts with the username configured.

no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no aaa new-model
ethernet lmi ce
memory-size iomem 10
!
crypto pki trustpoint TP-self-signed-199739xxxx
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-19973xxxxx
revocation-check none
rsakeypair TP-self-signed-199739xxxx
!
crypto pki certificate chain TP-self-signed-1997390140
certificate self-signed 01
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
chat-script gsm "" "1" TIMEOUT 60
--> chat-script gsm "" "ATDT*99#" TIMEOUT 60 "CONNECT"
--> chat-script gsm "" "ATDT#777" TIMEOUT 60 "CONNECT"
license udi pid CISCO881G-K9 sn FCZ1432xxxx
!
username xxxxxxxx priv 15 secret xxxx
username UMTS_CHAP_SRVR
!
controller Cellular 0
!
interface FastEthernet0
description *** LAN CONNECTION **
switchport access vlan 200
no ip address
duplex full
speed 100
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface FastEthernet4
no ip address
shutdown
duplex auto
speed auto
!
interface Cellular0
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation ppp
dialer in-band
dialer idle-timeout 0
dialer string gsm
dialer-group 1
async mode interactive
auto discovery qos
!
interface Vlan1
no ip address
!
interface Vlan200
ip address 192.168.200.1 255.255.255.0

ip nat inside
!
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip route 0.0.0.0 0.0.0.0 Cellular0
!
ip nat inside source list 1 interface Cellular0 overload
!
access-list 1 permit 192.168.200.0

!

dialer-list 1 protocol ip permit

!
control-plane
!
vstack
!
line con 0
no modem enable
line aux 0
line 3
exec-timeout 0 0
script dialer gsm
modem InOut
no exec
transport input all
rxspeed 7200000
txspeed 2000000
line vty 0 4
login
transport input none
!
end

MatA · ‎02-27-2018

Sir. My Hat off to you,

I deleted nvram:startup-config and reloaded the device.

I then applied your Config below at first it did not work/

Pinging my own external IP address nothing.

I then changed the chat-script for

--> chat-script gsm "" "ATDT*99#" TIMEOUT 60 "CONNECT"

and repeated.

Up it came, and I could see from the debug messages it connected and I was able to ping my ISP external address.

Let me say a BIG thank you for all the help via this Forum. This has fixed my rubbish config ;-)

My next step is to copy both my original config and this working config and work through it line by line and understand the differences and then understand the commands that are different.

Mat

configure CISCO881GW router to use APN with no user name and password