Solved: ROUTER 887VA NOT CONNECTING TO SKY ADSL PPPOA - PLEASE HELP!!!

deskguest · ‎11-06-2015

Hello,

I am new to Cisco and am trying to configure my router 887VA to use my sky adsl. I have configured as below and need some help and it is not connecting to the internet. I get a solid LED on the CD indicator of the router. Any help will be much appreciated.

DHCP appear to be working as the PC has an DHCP address.

I have replaced the Sky username and password with XXXXX but the real ones are present withe current config.

Thanks

Building configuration...

Current configuration : 2238 bytes
!
! No configuration change since last restart
version 15.1
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ROUTER
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$p7FT$P8Nx4Ah3WeWeJ48v5C1ca/
!
no aaa new-model
memory-size iomem 10
crypto pki token default removal timeout 0
!
!
ip source-route
!
!
!
ip dhcp excluded-address 192.168.3.1 192.168.3.99
!
ip dhcp pool DHCP-POOL
import all
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
dns-server 8.8.8.8
domain-name HOME.LOCAL
!
!
ip cef
no ip domain lookup
no ipv6 cef
!
!
license udi pid CISCO887VA-K9 sn XXXXXXX
!
!
!
!
!
!
controller VDSL 0
!
!
!
!
!
!
!
!
interface Ethernet0
no ip address
shutdown
!
interface ATM0
no ip address
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface Vlan1
ip address 192.168.3.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Dialer0
description WAN interface
ip address negotiated
ip mtu 1492
ip nat outside
ip virtual-reassembly in
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication chap callin
ppp chap hostname XXXXXXXXXXXXX
ppp chap password 7 XXXXXXXXXXXXXXXXX
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
ip nat inside source list ACL-LAN-TO-WAN interface Dialer0 overload
ip route 0.0.0.0 0.0.0.0 Dialer0
!
ip access-list extended ACL-LAN-TO-WAN
deny ip any 10.0.0.0 0.255.255.255
deny ip any 172.16.0.0 0.15.255.255
deny ip any 192.168.0.0 0.0.255.255
!
dialer-list 1 protocol ip permit
!
!
!
!
banner motd ^C
*******************************************************************************************

Unauthorized access is prohibited to this router.

***********************************************************************^C
!
line con 0
exec-timeout 0 0
password 7 14141B180F0B
logging synchronous
login
line aux 0
line vty 0 4
password 7 00071A150754
login
transport input all
!
end

acampbell · ‎11-11-2015

Hi,

The debug is clearly showing that your router is trying to negotiate with the
far end

LCP: O CONFREQ

These are OUTBOUND (O) messages from your router but you never see any INBOUND (I) messages from
the other end

You will need to check with the ISP that you have the correct broadband set up like PPPOA or
should you be using PPPOE , is you line good etc etc

Regards
Alex

Regards, Alex. Please rate useful posts.

View solution in original post

acampbell · ‎11-09-2015

Hi,

Your NAT list access list is basically denying everything

!
ip access-list extended ACL-LAN-TO-WAN
deny ip any 10.0.0.0 0.255.255.255
deny ip any 172.16.0.0 0.15.255.255
deny ip any 192.168.0.0 0.0.255.255
!

Remember access lists have an implicit deny all at the end which you dont see

re-write your access list to only allow traffic from your lan

!
no ip access-list extended ACL-LAN-TO-WAN
!
ip access-list extended ACL-LAN-TO-WAN
premit ip 192.168.3.0 0.0.0.255 any
!

Regards
Alex

Regards, Alex. Please rate useful posts.

deskguest · ‎11-09-2015

Than you Alex for your response. I have followed your instruction and have removed and added the above lines as per instruction but unfortunately I am still receiving no internet and a solid cd LED on the router. I receive a 192.168.3.100 ip from my host and can ping the router 192.168.3.1 successfully. Any other ideas please? Updated show run is as follows:

show run
Building configuration...

Current configuration : 2159 bytes
!
! No configuration change since last restart
version 15.1
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ROUTER
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$p7FT$P8Nx4Ah3WeWeJ48v5C1ca/
!
no aaa new-model
memory-size iomem 10
crypto pki token default removal timeout 0
!
!
ip source-route
--More-- !
!
!
ip dhcp excluded-address 192.168.3.1 192.168.3.99
!
ip dhcp pool DHCP-POOL
import all
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
dns-server 8.8.8.8
domain-name HOME.LOCAL
!
!
ip cef
no ip domain lookup
no ipv6 cef
!
!
license udi pid CISCO887VA-K9 sn FCZ1606C0RG
!
!
!
!
!
--More-- !
controller VDSL 0
!
!
!
!
!
!
!
!
interface Ethernet0
no ip address
shutdown
!
interface ATM0
no ip address
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet0
no ip address
--More-- !
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface Vlan1
ip address 192.168.3.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Dialer0
description WAN interface
ip address negotiated
ip mtu 1492
ip nat outside
ip virtual-reassembly in
encapsulation ppp
dialer pool 1
dialer-group 1
--More-- ppp authentication chap callin
ppp chap hostname XXXXXX
ppp chap password 7 XXXXXXX
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
ip nat inside source list ACL-LAN-TO-WAN interface Dialer0 overload
ip route 0.0.0.0 0.0.0.0 Dialer0
!
ip access-list extended ACL-LAN-TO-WAN
permit ip 192.168.3.0 0.0.0.255 any
!
dialer-list 1 protocol ip permit
!
!
!
!
banner motd ^C
*******************************************************************************************

--More-- Unauthorized access is prohibited to this router.

***********************************************************************^C
!
line con 0
exec-timeout 0 0
password 7 14141B180F0B
logging synchronous
login
line aux 0
line vty 0 4
password 7 00071A150754
login
transport input all
!
end

ROUTER#

acampbell · ‎11-09-2015

Hi,

Your config looks ok to me now.

Can you confirm that you are successfully authenticating chap and receiving ip address from the ISP.

show ip int brief

If no address is being received for int dialer 0 then you may need to
run "debug ppp negotiation & debug ppp authentication"

Please also check you have the correct username & password from the ISP

Regards
Alex

Regards, Alex. Please rate useful posts.

deskguest · ‎11-11-2015

Hi,

Still not conencting. I am not receiving an IP address from the ISP and have copied the debug info from the debug ppp negotiaition and debug ppp authentication as below. A lot of it was repeated so I deleted some out out but essentially it repeats as below. Any other ideas will be welcome. I cannot confirm the user details - Sky refuses to confirm them!! But believe these to be correct as I took these from my current working router config. Thanks again.

ROUTER#show ip int brief

Interface IP-Address OK? Method Status Protocol

ATM0 unassigned YES NVRAM up up

Dialer0 unassigned YES NVRAM up up

Ethernet0 unassigned YES NVRAM administratively down down

FastEthernet0 unassigned YES unset down down

FastEthernet1 unassigned YES unset down down

FastEthernet2 unassigned YES unset down down

FastEthernet3 unassigned YES unset down down

NVI0 unassigned YES unset administratively down down

Virtual-Access1 unassigned YES unset up up

Virtual-Access2 unassigned YES unset up down

Vlan1 192.168.3.1 YES NVRAM

Nov 11 19:00:22.043: Vi2 PPP DISC: LCP failed to negotiate

Nov 11 19:00:22.043: PPP: NET STOP send to AAA.

Nov 11 19:00:22.043: Vi2 PPP: No remote authentication for call-out

Nov 11 19:00:22.043: Vi2 LCP: Event[Timeout-] State[REQsent to Stopped]

Nov 11 19:00:22.043: Vi2 LCP: Event[DOWN] State[Stopped to Starting]

Nov 11 19:00:22.043: Vi2 PPP: Phase is DOWN

Nov 11 19:00:23.043: PPP: Alloc Context [85DB83DC]

Nov 11 19:00:23.043: ppp40 PPP: Phase is ESTABLISHING

Nov 11 19:00:23.043: Vi2 PPP: Using dialer call direction

Nov 11 19:00:23.043: Vi2 PPP: Treating connection as a callout

Nov 11 19:00:23.043: Vi2 PPP: Session handle[A5000028] Session id[40]

Nov 11 19:00:23.043: Vi2 LCP: Event[OPEN] State[Initial to Starting]

Nov 11 19:00:23.043: Vi2 PPP: No remote authentication for call-out

Nov 11 19:00:23.043: Vi2 LCP: O CONFREQ [Starting] id 1 len 10

Nov 11 19:00:23.043: Vi2 LCP: MagicNumber 0x2B1578E3 (0x05062B1578E3)

Nov 11 19:00:23.043: Vi2 LCP: Event[UP] State[Startin

ROUTER#g to REQsent]

ROUTER#

Nov 11 19:00:25.051: Vi2 LCP: O CONFREQ [REQsent] id 2 len 10

Nov 11 19:00:25.051: Vi2 LCP: MagicNumber 0x2B1578E3 (0x05062B1578E3)

Nov 11 19:00:25.051: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]

ROUTER#

Nov 11 19:00:27.067: Vi2 LCP: O CONFREQ [REQsent] id 3 len 10

Nov 11 19:00:27.067: Vi2 LCP: MagicNumber 0x2B1578E3 (0x05062B1578E3)

Nov 11 19:00:27.067: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]

ROUTER#

Nov 11 19:00:29.083: Vi2 LCP: O CONFREQ [REQsent] id 4 len 10

Nov 11 19:00:29.083: Vi2 LCP: MagicNumber 0x2B1578E3 (0x05062B1578E3)

Nov 11 19:00:29.083: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]

ROUTER#

Nov 11 19:00:31.099: Vi2 LCP: O CONFREQ [REQsent] id 5 len 10

Nov 11 19:00:31.099: Vi2 LCP: MagicNumber 0x2B1578E3 (0x05062B1578E3)

Nov 11 19:00:31.099: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]

ROUTER#

Nov 11 19:00:33.115: Vi2 LCP: O CONFREQ [REQsent] id 6 len 10

Nov 11 19:00:33.115: Vi2 LCP: MagicNumber 0x2B1578E3 (0x05062B1578E3)

Nov 11 19:00:33.115: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]

ROUTER#

Nov 11 19:00:35.131: Vi2 LCP: O CONFREQ [REQsent] id 7 len 10

Nov 11 19:00:35.131: Vi2 LCP: MagicNumber 0x2B1578E3 (0x05062B1578E3)

Nov 11 19:00:35.131: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]

ROUTER#

Nov 11 19:00:37.147: Vi2 LCP: O CONFREQ [REQsent] id 8 len 10

Nov 11 19:00:37.147: Vi2 LCP: MagicNumber 0x2B1578E3 (0x05062B1578E3)

Nov 11 19:00:37.147: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]

ROUTER#

Nov 11 19:00:39.163: Vi2 LCP: O CONFREQ [REQsent] id 9 len 10

Nov 11 19:00:39.163: Vi2 LCP: MagicNumber 0x2B1578E3 (0x05062B1578E3)

Nov 11 19:00:39.163: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]

ROUTER#

Nov 11 19:00:41.179: Vi2 LCP: O CONFREQ [REQsent] id 10 len 10

Nov 11 19:00:41.179: Vi2 LCP: MagicNumber 0x2B1578E3 (0x05062B1578E3)

Nov 11 19:00:41.179: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]

ROUTER#

Nov 11 19:00:43.195: Vi2 PPP DISC: LCP failed to negotiate

Nov 11 19:00:43.195: PPP: NET STOP send to AAA.

Nov 11 19:00:43.195: Vi2 PPP: No remote authentication for call-out

Nov 11 19:00:43.195: Vi2 LCP: Event[Timeout-] State[REQsent to Stopped]

Nov 11 19:00:43.195: Vi2 LCP: Event[DOWN] State[Stopped to Starting]

Nov 11 19:00:43.195: Vi2 PPP: Phase is DOWN

Nov 11 19:00:44.195: PPP: Alloc Context [85DB83DC]

Nov 11 19:00:44.195: ppp41 PPP: Phase is ESTABLISHING

Nov 11 19:00:44.195: Vi2 PPP: Using dialer call direction

Nov 11 19:00:44.195: Vi2 PPP: Treating connection as a callout

Nov 11 19:00:44.195: Vi2 PPP: Session handle[76000029] Session id[41]

Nov 11 19:00:44.195: Vi2 LCP: Event[OPEN] State[Initial to Starting]

Nov 11 19:00:44.195: Vi2 PPP: No remote authentication for call-out

Nov 11 19:00:44.195: Vi2 LCP: O CONFREQ [Starting] id 1 len 10

Nov 11 19:00:44.195: Vi2 LCP: MagicNumber 0x2B15CB93 (0x05062B15CB93)

Nov 11 19:00:44.195: Vi2 LCP: Event[UP] State[Startin

ROUTER#g to REQsent]

Nov 11 19:00:46.203: Vi2 LCP: O CONFREQ [REQsent] id 2 len 10

Nov 11 19:00:46.203: Vi2 LCP: MagicNumber 0x2B15CB93 (0x05062B15CB93)

Nov 11 19:00:46.203: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]

Nov 11 19:00:48.219: Vi2 LCP: O CONFREQ [REQsent] id 3 len 10

Nov 11 19:00:48.219: Vi2 LCP: MagicNumber 0x2B15CB93 (0x05062B15CB93)

Nov 11 19:00:48.219: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]

Nov 11 19:00:50.235: Vi2 LCP: O CONFREQ [REQsent] id 4 len 10

Nov 11 19:00:50.235: Vi2 LCP: MagicNumber 0x2B15CB93 (0x05062B15CB93)

Nov 11 19:00:50.235: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]

Nov 11 19:00:52.251: Vi2 LCP: O CONFREQ [REQsent] id 5 len 10

Nov 11 19:00:52.251: Vi2 LCP: MagicNumber 0x2B15CB93 (0x05062B15CB93)

Nov 11 19:00:52.251: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]

Nov 11 19:00:54.267: Vi2 LCP: O CONFREQ [REQsent] id 6 len 10

Nov 11 19:00:54.267: Vi2 LCP: MagicNumber 0x2B15CB93 (0x05062B15CB93)

Nov 11 19:00:54.267: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]

Nov 11 19:00:56.283: Vi2 LCP: O CONFREQ [REQsent] id 7 len 10

Nov 11 19:00:56.283: Vi2 LCP: MagicNumber 0x2B15CB93 (0x05062B15CB93)

Nov 11 19:00:56.283: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]

Nov 11 19:00:58.299: Vi2 LCP: O CONFREQ [REQsent] id 8 len 10

Nov 11 19:00:58.299: Vi2 LCP: MagicNumber 0x2B15CB93 (0x05062B15CB93)

Nov 11 19:00:58.299: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]

Nov 11 19:01:00.315: Vi2 LCP: O CONFREQ [REQsent] id 9 len 10

Nov 11 19:01:00.315: Vi2 LCP: MagicNumber 0x2B15CB93 (0x05062B15CB93)

Nov 11 19:01:00.315: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]

ROUTER#no debug ppp negotiation

Nov 11 19:01:02.331: Vi2 LCP: O CONFREQ [REQsent] id 10 len 10

Nov 11 19:01:02.331: Vi2 LCP: MagicNumber 0x2B15CB93 (0x05062B15CB93)

Nov 11 19:01:02.331: Vi2 LCP: Event[Timeout+] State[REQsent to REQsent]

ROUTER#no debug ppp negotiation

Nov 11 19:01:04.347: Vi2 PPP DISC: LCP failed to negotiate

Nov 11 19:01:04.347: PPP: NET STOP send to AAA.

Nov 11 19:01:04.347: Vi2 PPP: No remote authentication for call-out

Nov 11 19:01:04.347: Vi2 LCP: Event[Timeout-] State[REQsent to Stopped]

Nov 11 19:01:04.347: Vi2 LCP: Event[DOWN] State[Stopped to Starting]

Nov 11 19:01:04.347: Vi2 PPP: Phase is DOWN

Nov 11 19:01:05.347: PPP: Alloc Context [85DB83DC]

Nov 11 19:01:05.347: ppp42 PPP: Phase is ESTABLISHING

Nov 11 19:01:05.347: Vi2 PPP: Using dialer call direction

Nov 11 19:01:05.347: Vi2 PPP: Treating connection as a callout

Nov 11 19:01:05.347: Vi2 PPP: Session handle[7A00002A] Session id[42]

Nov 11 19:01:05.347: Vi2 LCP: Event[OPEN] State[Initial to Starting]

Nov 11 19:01:05.347: Vi2 PPP: No remote authentication for call-out

Nov 11 19:01:05.347: Vi2 LCP: O CONFREQ [Starting] id 1 len 10

Nov 11 19:01:05.347: Vi2 LCP: MagicNumber 0x2B161E41 (0x05062B161E41)

Nov 11 19:01:05.347: Vi2 LCP: Event[UP] State[Startin

acampbell · ‎11-11-2015

Hi,

The debug is clearly showing that your router is trying to negotiate with the
far end

LCP: O CONFREQ

These are OUTBOUND (O) messages from your router but you never see any INBOUND (I) messages from
the other end

You will need to check with the ISP that you have the correct broadband set up like PPPOA or
should you be using PPPOE , is you line good etc etc

Regards
Alex

Regards, Alex. Please rate useful posts.

deskguest · ‎11-12-2015

Hi,

As Sky do not want to disclose any info at all I've has to do some of my own research. I have confirmed from the current router status the ADSL username and password. The current router is using PPPoA. The only difference that I did notice was that it uses vcmux but the router does only allows me to configure aal5mux and about 3 other options but not vcmux. Could this be causing an issue?

deskguest · ‎11-13-2015

Hi,

After researching the vc-mux I realised I was using the correct network traffic control (aal5vdmux) so I decided to look at the config again. I realised that Sky uses 0/38 as the VPI/VCI and I had 8/35 in the interface ATM0 settings. After changing this the connection was made but I was receiving 'chap authentication failure' errors. I checked all combinations of the username XXXX@skydsl and password that I could find but none of them connected.

What I found did connect was the following details:

username:install@o2broadband.co.uk

password:install

So to summarize, use the above credentials to config the non Sky router that you have and this should connect you.

The previous show run config was good (but use 0/38 as the VPI/VCI settings, vc-mux (aal5vcmux)) for the setup of the Cisco 887VA using PPPoA for Sky ADSL customers.

Will be leaving Sky soon as they did not disclose the username and password to me and for cost reasons!!! There's alot of broadband and phone deals which are alot cheaper!!!

Thanks to Alex for all your help. My first Cisco problem resolved!!!!