Me and my friend are trying to use a ppp authentication for a school lab but the interface is always disabled and we've tried checking every problem we can think of. Please help if you can find the issue we can't.
We are using a DCE cable with the clock rate side facing R1. We are using a ipsec vpn tunnel through these ports as well.
R1:
R1#show interfaces serial 0/2/1
Serial0/2/1 is up, line protocol is down (disabled)
Hardware is HD64570
Internet address is 50.0.0.1/24
MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation PPP, loopback not set, keepalive set (10 sec)
LCP Closed
Closed: LEXCP, BRIDGECP, IPCP, CCP, CDPCP, LLC2, BACP
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0 (size/max/drops); Total output drops: 0
Queueing strategy: weighted fair
Output queue: 0/1000/64/0 (size/max total/threshold/drops)
Conversations 0/0/256 (active/max active/max total)
Reserved Conversations 0/0 (allocated/max allocated)
Available Bandwidth 1158 kilobits/sec
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 packets output, 0 bytes, 0 underruns
R4:
R4#show interfaces serial 0/3/1
Serial0/3/1 is up, line protocol is down (disabled)
Hardware is HD64570
Internet address is 50.0.0.2/24
MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation PPP, loopback not set, keepalive set (10 sec)
LCP Closed
Closed: LEXCP, BRIDGECP, IPCP, CCP, CDPCP, LLC2, BACP
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0 (size/max/drops); Total output drops: 0
Queueing strategy: weighted fair
Output queue: 0/1000/64/0 (size/max total/threshold/drops)
Conversations 0/0/256 (active/max active/max total)
Reserved Conversations 0/0 (allocated/max allocated)
Available Bandwidth 1158 kilobits/sec
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 packets output, 0 bytes, 0 underruns
0 output errors, 0 collisions, 2 interface resets
0 output buffer failures, 0 output buffers swapped out
0 carrier transitions
DCD=up DSR=up DTR=up RTS=up CTS=up
R1:
R1#show run
Building configuration...
Current configuration : 2772 bytes
!
version 15.1
service timestamps log datetime msec
no service timestamps debug datetime msec
service password-encryption
security passwords min-length 10
!
hostname R1
!
!
!
enable secret 5 $1$mERr$HYKh40On65szbkJKMF7Qn.
!
!
!
!
!
!
no ip cef
no ipv6 cef
!
!
!
username admin secret 5 $1$mERr$Q0NriKRSL5J0jgg7JKcOx/
!
!
license udi pid CISCO2911/K9 sn FTX15244DTY-
license boot module c2900 technology-package securityk9
!
!
!
crypto isakmp policy 10
encr aes 256
authentication pre-share
group 5
!
crypto isakmp key 7W7QhDRhwdkzPT83 address 50.0.0.2
!
!
!
crypto ipsec transform-set HQ-BO esp-aes 256 esp-sha-hmac
!
crypto map IPSEC-MAP 10 ipsec-isakmp
set peer 50.0.0.2
set pfs group5
set security-association lifetime seconds 86400
set transform-set HQ-BO
match address 150
!
!
!
!
no ip domain-lookup
ip domain-name aurora.com
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface GigabitEthernet0/0
ip address 40.0.0.1 255.255.255.0
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 aurora2022
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 30.0.0.2 255.255.255.0
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 aurora2022
duplex auto
speed auto
!
interface GigabitEthernet0/2
no ip address
duplex auto
speed auto
!
interface Serial0/2/0
no ip address
clock rate 2000000
shutdown
!
interface Serial0/2/1
ip address 50.0.0.1 255.255.255.0
encapsulation ppp
ppp authentication chap
clock rate 2000000
!
interface Vlan1
no ip address
shutdown
!
router ospf 100
log-adjacency-changes
area 0 authentication message-digest
network 30.0.0.0 0.0.0.0 area 10
network 40.0.0.0 0.0.0.0 area 10
network 40.0.0.0 0.0.0.255 area 10
network 30.0.0.0 0.0.0.255 area 10
network 50.0.0.0 0.0.0.255 area 10
!
ip classless
ip route 172.16.40.0 255.255.255.0 50.0.0.2
ip route 172.16.20.0 255.255.255.0 50.0.0.2
ip route 172.16.51.0 255.255.255.0 50.0.0.2
!
ip flow-export version 9
!
!
access-list 150 permit ip 10.0.0.0 0.0.0.255 192.168.40.0 0.0.0.255
access-list 150 permit ip 20.0.0.0 0.0.0.255 192.168.40.0 0.0.0.255
access-list 150 permit ip 10.0.0.0 0.0.0.255 192.168.20.0 0.0.0.255
access-list 150 permit ip 20.0.0.0 0.0.0.255 192.168.20.0 0.0.0.255
access-list 150 permit ip 192.168.40.0 0.0.0.255 20.0.0.0 0.0.0.255
access-list 150 permit ip 192.168.20.0 0.0.0.255 10.0.0.0 0.0.0.255
access-list 150 permit ip 192.168.20.0 0.0.0.255 20.0.0.0 0.0.0.255
access-list 150 permit ip 192.168.40.0 0.0.0.255 10.0.0.0 0.0.0.255
!
banner motd ^CUnauthorized access is prohibited^C
!
!
!
!
!
logging 20.0.0.12
line con 0
password 7 08324543061706181C1B0D1739
login
!
line aux 0
!
line vty 0 4
login local
transport input ssh
line vty 5 15
login local
transport input ssh
!
!
!
end
R4:
R4#show run
Building configuration...
Current configuration : 3336 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
service password-encryption
security passwords min-length 10
!
hostname R4
!
!
!
enable secret 5 $1$mERr$HYKh40On65szbkJKMF7Qn.
!
!
ip dhcp excluded-address 172.16.20.1 172.16.20.10
ip dhcp excluded-address 172.16.40.1 172.16.40.10
ip dhcp excluded-address 172.16.51.1 172.16.51.10
!
ip dhcp pool vPool20
network 172.16.20.0 255.255.255.0
default-router 172.16.20.1
ip dhcp pool vPool40
network 172.16.40.0 255.255.255.0
default-router 172.16.40.1
ip dhcp pool vPool51
network 172.16.51.0 255.255.255.0
default-router 172.16.51.1
!
!
!
no ip cef
no ipv6 cef
!
!
!
username admin secret 5 $1$mERr$Q0NriKRSL5J0jgg7JKcOx/
!
!
license udi pid CISCO2911/K9 sn FTX15245ZKN-
license boot module c2900 technology-package securityk9
!
!
!
crypto isakmp policy 10
encr aes 256
authentication pre-share
group 5
!
crypto isakmp key 7W7QhDRhwdkzPT83 address 50.0.0.1
!
!
!
crypto ipsec transform-set BO-HQ esp-aes 256 esp-sha-hmac
!
crypto map IPSEC-MAP 10 ipsec-isakmp
set peer 50.0.0.1
set pfs group5
set security-association lifetime seconds 86400
set transform-set BO-HQ
match address 150
!
!
!
!
no ip domain-lookup
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface GigabitEthernet0/0
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/1.20
description HR
encapsulation dot1Q 20
ip address 172.16.20.1 255.255.255.0
!
interface GigabitEthernet0/1.40
description Forsaljning
encapsulation dot1Q 40
ip address 172.16.40.1 255.255.255.0
!
interface GigabitEthernet0/1.51
description Guests
encapsulation dot1Q 51
ip address 172.16.51.1 255.255.255.0
!
interface GigabitEthernet0/2
no ip address
duplex auto
speed auto
shutdown
!
interface Serial0/3/0
no ip address
clock rate 2000000
shutdown
!
interface Serial0/3/1
ip address 50.0.0.2 255.255.255.0
encapsulation ppp
ppp authentication chap
!
interface Vlan1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
area 0 authentication message-digest
network 172.16.20.0 0.0.0.255 area 10
network 172.16.40.0 0.0.0.255 area 10
network 172.16.51.0 0.0.0.255 area 10
network 50.0.0.0 0.0.0.255 area 10
!
ip classless
ip route 192.168.40.0 255.255.255.0 172.16.40.11
ip route 10.0.0.0 255.255.255.0 50.0.0.1
ip route 20.0.0.0 255.255.255.0 50.0.0.1
ip route 30.0.0.0 255.255.255.0 50.0.0.1
ip route 40.0.0.0 255.255.255.0 50.0.0.1
!
ip flow-export version 9
!
!
access-list 150 permit ip 10.0.0.0 0.0.0.255 192.168.40.0 0.0.0.255
access-list 150 permit ip 20.0.0.0 0.0.0.255 192.168.40.0 0.0.0.255
access-list 150 permit ip 10.0.0.0 0.0.0.255 192.168.20.0 0.0.0.255
access-list 150 permit ip 20.0.0.0 0.0.0.255 192.168.20.0 0.0.0.255
access-list 150 permit ip 192.168.40.0 0.0.0.255 10.0.0.0 0.0.0.255
access-list 150 permit ip 192.168.40.0 0.0.0.255 20.0.0.0 0.0.0.255
access-list 150 permit ip 192.168.20.0 0.0.0.255 10.0.0.0 0.0.0.255
access-list 150 permit ip 192.168.20.0 0.0.0.255 20.0.0.0 0.0.0.255
!
no cdp run
!
banner motd ^CUnauthorized access is prohibited!^C
!
!
!
!
!
line con 0
password 7 08324543061706181C1B0D1739
login
!
line aux 0
!
line vty 0 4
login local
transport input ssh
line vty 5 15
login local
transport input ssh
!
!
!
end
