Solved: PPP Fails in Production Network

Saman Shamim · ‎09-26-2011

Hi guys,

This is a real world project. A Cisco 1700 series router will be installed at one location and a ADTRAN 1224R router will be installed on the other side. I’d like to test it before installing at client-side by using a Cisco 2800 and the ADTRAN mentioned above. I made a T1 crossover cable and CD led is green on 1DSU-T1 V2 of 2800.

And of course it’s not working!

- I believe something is wrong with clocking. I used service-module t1 clock source internal command on 2800 to provide clocking and set ADTRAN clocking to Line BUT If I reboot the ADTRAN, while debugging service-module on 2800, I can see this:

SERVICE_MODULE(Serial0/1/0):Unit has no clock [complete output is below].

And even if I swap clocking sources, still get the same output on 2800 as above.

- PPP requests sent from either sides are not acknowledged. [output below]

- I get Se0/1/0 PPP: Authorization required every a few seconds on 2800. [output below]

Cisco 2800 (hostname MEE_KC)

1. sh run

username MEE_GF password 0 w1ll0w

interface Serial0/1/0

ip address 100.100.100.1 255.255.255.252

encapsulation ppp

service-module t1 clock source internal

service-module t1 fdl ansi

ppp authentication chap pap

2. sh int s0/1/0

Serial0/1/0 is up,

line protocol is down

Hardware is GT96K with integrated T1 CSU/DSU

Internet address is 100.100.100.1/30

MTU 1500 bytes, BW 1536 Kbit/sec, DLY 20000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation PPP, LCP Listen

, loopback not set

Keepalive set (10 sec)

Last input never, output 00:00:12, output hang never

Last clearing of "show interface" counters 00:15:39

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: weighted fair

Output queue: 0/1000/64/0 (size/max total/threshold/drops)

Conversations 0/1/256 (active/max active/max total)

Reserved Conversations 0/0 (allocated/max allocated)

Available Bandwidth 1152 kilobits/sec

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

0 packets input, 0 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

178 packets output, 3382 bytes, 0 underruns

0 output errors, 0 collisions, 17 interface resets

0 unknown protocol drops

0 output buffer failures, 0 output buffers swapped out

3 carrier transitions

DCD=up DSR=up DTR=up RTS=up CTS=up

3. sh service serial0/1/0

Interface Serial0/1/0

Module type is T1/fractional

Hardware revision is 1.2, Software revision is 20090812,

Image checksum is 0x4346F5, Protocol revision is 0.1

Transmitter is sending remote alarm.

Receiver has loss of signal, loss of frame,

Framing is ESF, Line Code is B8ZS, Current clock source is

internal, Fraction has 24 timeslots (64 Kbits/sec each), Net bandwidth is 1536 Kbits/sec.

Last module self-test (done at startup): Passed

Last clearing of alarm counters 00:13:18

loss of signal : 1, current duration 00:01:02

loss of frame : 1, current duration 00:01:02

AIS alarm : 0,

Remote alarm : 1, last occurred 00:13:09

Module access errors : 0,

Total Data (last 0 15 minute intervals):

0 Line Code Violations, 0 Path Code Violations

0 Slip Secs, 0 Fr Loss Secs, 0 Line Err Secs, 0 Degraded Mins

0 Errored Secs, 0 Bursty Err Secs, 0 Severely Err Secs, 0 Unavail Secs

Data in current interval (796 seconds elapsed):

16671 Line Code Violations, 3 Path Code Violations

0 Slip Secs, 62 Fr Loss Secs, 3 Line Err Secs, 1 Degraded Mins

1 Errored Secs, 1 Bursty Err Secs, 0 Severely Err Secs, 63 Unavail Secs

MEE_KC#Write data 4, cmd 82880600 to B0200014

Msg : 8 (0, 64, 20)

Write data 0, cmd 82888600 to B0200014

Write data 0, cmd 82880600 to B0200014

Write data 0, cmd 82888600 to B0200014

Write data 0, cmd 82880600 to B0200014

DEBUGS

1. debug service-module

SERVICE_MODULE(Serial0/1/0):Unit has no clock

SERVICE_MODULE(Serial0/1/0): detects loss of signal

SERVICE_MODULE(Serial0/1/0): detects loss of frame

%LINK-3-UPDOWN: Interface Serial0/1/0, changed state to down

SERVICE_MODULE(Serial0/1/0): loss of signal ended after duration 00:01:18

SERVICE_MODULE(Serial0/1/0): loss of frame ended after duration 00:01:18

2.

debug ppp authen

%LINK-3-UPDOWN: Interface Serial0/1/0, changed state to up

Se0/1/0 PPP: Using default call direction

Se0/1/0 PPP: Treating connection as a dedicated line

Se0/1/0 PPP: Session handle[82000002] Session id[2]

Se0/1/0 PPP: Authorization required

3. debug ppp neg

Se0/1/0 LCP: O CONFREQ [REQsent] id 248 len 15

Se0/1/0 LCP: AuthProto CHAP (0x0305C22305)

Se0/1/0 LCP: MagicNumber 0x2346C2AD (0x05062346C2AD)

Se0/1/0 LCP: Timeout: State REQsent

Se0/1/0 LCP:O CONFREQ [REQsent] id 249 len 15

Se0/1/0 LCP: AuthProto CHAP (0x0305C22305)

Se0/1/0 LCP: MagicNumber 0x2346C2AD (0x05062346C2AD)

Se0/1/0 LCP: Timeout: State REQsent

Se0/1/0 LCP: State is Listen

***

ADTRAN 1224R (hostname MEE_GF)

1. sh run

username "MEE_KC" password "w1ll0w"

interface t1 1/1

description 1st T1 to King City

tdm-group 1 timeslots 24 speed 64

no shutdown

interface ppp 1

ip address 100.100.100.2 255.255.255.252

ppp authentication chap

no shutdown

cross-connect 1 t1 1/1 1 ppp 1

2. sh int t1 1/1

t1 1/1 is UP

Description: 1st T1 to King City

Receiver has no alarms

T1 coding is B8ZS, framing is ESF

Clock source is line, FDL type is ANSI

Line build-out is 0dB

No remote loopbacks, No network loopbacks

Acceptance of remote loopback requests enabled

Tx Alarm Enable: rai

Last clearing of counters 00:12:07

loss of frame : 0

loss of signal : 0

AIS alarm : 0

Remote alarm : 1, last occurred 00:12:07

DS0 Status: 123456789012345678901234

-----------------------N

Status Legend: '-' = DS0 is unallocated

'N' = DS0 is dedicated (nailed)

Line Status: -- No Alarms --

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 40 bits/sec, 0 packets/sec

Current Performance Statistics:

0 Errored Seconds, 0 Bursty Errored Seconds

0 Severely Errored Seconds, 0 Severely Errored Frame Seconds

0 Unavailable Seconds, 0 Path Code Violations

0 Line Code Violations, 0 Controlled Slip Seconds

0 Line Errored Seconds, 0 Degraded Minutes

TDM group 1,

line protocol is DOWN

Encapsulation PPP (ppp 1)

0 packets input, 0 bytes, 0 no buffer

0 runts, 0 giants, 0 throttles

136 input errors, 0 CRC, 121 frame

15 abort, 0 discards, 0 overruns

200 packets output, 3800 bytes, 0 underruns

3. sh int ppp 1

ppp 1 is DOWN

Configuration:

Keep-alive is set (10 sec.)

No multilink

MTU = 1500

Authentication protocol is CHAP

IP is configured

100.100.100.2 255.255.255.252

Link thru t1 1/1 is DOWN;

LCP state is REQSENT

Receive: bytes=0, pkts=0, errors=0

Transmit: bytes=7828, pkts=412, errors=0

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 40 bits/sec, 0 packets/sec

Bundle information

Queueing method: weighted fair

HDLC tx ring limit: 0

Output queue: 0/0/428/64/0 (size/highest/max total/threshold/drops)

Conversations 0/0/256 (active/max active/max total)

Available Bandwidth 48 kilobits/sec

4. debug ppp neg

2011.09.26 08:56:57 PPP.NEGOTIATION PPPtx[t1 1/1] LCP: Conf-Req ID=4 Len=15 AP(CHAP)MAGIC(577b5a40)

Any ideas?

vmiller · ‎09-26-2011

Well played, sir!

interoperability is an illusion.

View solution in original post

vmiller · ‎09-26-2011

You have no clock source. Make one one device "internal" and the other "line" that will at least make this fake circuit work. You will need to change it when you hook up to the telco

Saman Shamim · ‎09-26-2011

You have no clock source.

I think I do:

from sh service serial0/1/0 on 2800:

Current clock source is internal

from sh int t1 1/1 on ADTRAN:

Clock source is line

vmiller · ‎09-26-2011

I wonder if something is wrong with the controller for that module. Do you get unit has no clock if you change from internal to line ?

Saman Shamim · ‎09-26-2011

Thanks for the reply vmiller.

Here is an update:

I swapped ADTRAN with a 1700 series router and everything worked great between 2800 and 1700. Next, I repalced 2800 with ADTRAN and I saw exact same behavior as above. The ADTRAN doesn't establish a session with its peer. Time to call ADTRAN support?

vmiller · ‎09-26-2011

And I bet if youwent adtran to adtran it would work just fine, or if you had telco in between.

I'd as adtran....see what they say.

Saman Shamim · ‎09-26-2011

SOLVED

After being on the line with ADTRAN support for an hour we managed to establish a session without authentication. The reason that it woudn't work before was this:

DS0 Status: 123456789012345678901234

-----------------------N

Status Legend: '-' = DS0 is unallocated

'N' = DS0 is dedicated (nailed)

which now is:

DS0 Status: 123456789012345678901234

NNNNNNNNNNNNNNNNNNNNNNNN

Status Legend: '-' = DS0 is unallocated

'N' = DS0 is dedicated (nailed)

But I wasn't still happy. I wanted to use PPP authentication to have a "cool" configuration. And I finally figured it out:

The ppp username and password on ADTRAN routers are not defined as Cisco routers. So if you set username and password as the following it won't work:

MEE_GF(config)#username MEE_KC password w1ll0w

you have to do it under logical ppp interface. Go figure!

MEE_GF(config-ppp 1)#int ppp 1

MEE_GF(config-ppp 1)#username MEE_KC password w1ll0w

vmiller · ‎09-26-2011

Well played, sir!

interoperability is an illusion.