キャンセル
次の結果を表示 
次の代わりに検索 
もしかして: 
cancel
22907
閲覧回数
25
いいね!
0
コメント
Katsunori Ishizuka
Cisco Employee
Cisco Employee

PPPoE接続に失敗する場合のトラブルシューティング - その3- です。その1で説明した具体的な事例について説明します。

5 認証方式のネゴシエーションの問題

PAP/CHAP などの認証方式の指定方法や、PPPoE サーバ側の機器および設定に依存して認証方式のネゴシエーションに失敗する場合があります。具体的には、PPPoEサーバの認証方式が PAP 認証でのみ認証が可能な設計で LCP ネゴシエーションの際には、CHAP/PAP 両方が有効になっているという場合です。このような場合に、PPPoE Client 側で、PAP のみ、CHAP のみを設定すると接続に失敗します。

5-1 PPPoE Client Router で PAP 認証を設定した場合

この例では、Client 側の認証方式が、PAP 認証として設定されている場合においても、PPPoE Server から [ Authentication Protocol は CHAP で...] という CONFREQ を受信しています。PPPoE Client 側では、PAP の設定のみをおこなっていますが、[ では CHAP で... ] という形で CONFACK を送信し LCP の処理が終了しています。この場合、当然のように CAHP 認証はできませんので PPPoE Client から TERMREQ が送信され、セッションが終了します。

LCPで CHAP パラメータでネゴシエーションが行われている様子

Vi2 LCP: I CONFREQ [ACKrcvd] id 2 len 19

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto CHAP (0x0305C22305)

Vi2 LCP:    MagicNumber 0xB4D6C5C4 (0x0506B4D6C5C4)

Vi2 LCP: O CONFACK [ACKrcvd] id 2 len 19

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto CHAP (0x0305C22305)

Vi2 LCP:    MagicNumber 0xB4D6C5C4 (0x0506B4D6C5C4)

CAHP認証に失敗している様子

Vi2 LCP: State is Open

Vi2 PPP: Received SENDAUTH Response FAIL

Vi2 CHAP: Unable to authenticate for peer

Vi2 PPP DISC: User failed CHAP authentication

PPPoE Client から TERMREQ が送信され、セッションが終了する様子

Vi2 LCP: O TERMREQ [Open] id 3 len 4

Vi2 LCP: Event[CLOSE] State[Open to Closing]

Vi2 PPP: Phase is TERMINATING

Vi2 LCP: I TERMACK [Closing] id 3 len 4

Vi2 PPP: No remote authentication for call-out

Vi2 LCP: Event[Receive TermAck] State[Closing to Closed]

Vi2 LCP: Event[DOWN] State[Closed to Initial]

Vi2 PPP: Phase is DOWN

PPPoE : Shutting down client session

PPPoE Client 側で PAP 認証 を設定した場合のデバッグログのサンプル

* 当初MTUの問題も想定していたため、MTU1438を設定(1454でよかった)し、取得したログになっており、MRU のネゴシエーションで一度 NAK が帰ってきていますが、無視してください。

-----------------------------------------------------------------------------------

%LINK-3-UPDOWN: Interface Virtual-Access2, changed state to up

Vi2 PPP: Sending cstate UP notification

Vi2 PPP: Processing CstateUp message

PPP: Alloc Context [30A59044]

ppp267 PPP: Phase is ESTABLISHING

Vi2 PPP: Using dialer call direction

Vi2 PPP: Treating connection as a callout

Vi2 PPP: Session handle[7200000B] Session id[267]

Vi2 LCP: Event[OPEN] State[Initial to Starting]

Vi2 PPP: No remote authentication for call-out

Vi2 LCP: O CONFREQ [Starting] id 1 len 14

Vi2 LCP:    MRU 1438 (0x0104059E)

Vi2 LCP:    MagicNumber 0x8168668C (0x05068168668C)

Vi2 LCP: Event[UP] State[Starting to REQsent]

Vi2 LCP: I CONFNAK [REQsent] id 1 len 8

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP: O CONFREQ [REQsent] id 2 len 14

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    MagicNumber 0x8168668C (0x05068168668C)

Vi2 LCP: Event[Receive ConfNak/Rej] State[REQsent to REQsent]

Vi2 LCP: I CONFACK [REQsent] id 2 len 14

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    MagicNumber 0x8168668C (0x05068168668C)

Vi2 LCP: Event[Receive ConfAck] State[REQsent to ACKrcvd]

Vi2 LCP: I CONFREQ [ACKrcvd] id 2 len 19

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto CHAP (0x0305C22305)

Vi2 LCP:    MagicNumber 0xB4D6C5C4 (0x0506B4D6C5C4)

Vi2 LCP: O CONFACK [ACKrcvd] id 2 len 19

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto CHAP (0x0305C22305)

Vi2 LCP:    MagicNumber 0xB4D6C5C4 (0x0506B4D6C5C4)

Vi2 LCP: Event[Receive ConfReq+] State[ACKrcvd to Open]

Vi2 PPP: Queue CHAP code[1] id[1]

Vi2 PPP: Phase is AUTHENTICATING, by the peer

Vi2 CHAP: Redirect packet to Vi2

Vi2 CHAP: I CHALLENGE id 1 len 38 from "PPPoE_Server"

Vi2 PPP: Sent CHAP SENDAUTH Request

Vi2 LCP: State is Open

Vi2 PPP: Received SENDAUTH Response FAIL

Vi2 CHAP: Unable to authenticate for peer

Vi2 PPP DISC: User failed CHAP authentication

Vi2 PPP: Sending AAA radius abort

Vi2 PPP: Sending Acct Event[Down] id[11A]

PPP: NET STOP send to AAA.

Vi2 LCP: O TERMREQ [Open] id 3 len 4

Vi2 LCP: Event[CLOSE] State[Open to Closing]

Vi2 PPP: Phase is TERMINATING

Vi2 LCP: I TERMACK [Closing] id 3 len 4

Vi2 PPP: No remote authentication for call-out

Vi2 LCP: Event[Receive TermAck] State[Closing to Closed]

Vi2 LCP: Event[DOWN] State[Closed to Initial]

Vi2 PPP: Phase is DOWN

PPPoE : Shutting down client session

[0]PPPoE 32670: O PADT  R:000b.4529.ec38 L:7081.05c1.7ec2 Gi0/2

%DIALER-6-UNBIND: Interface Vi2 unbound from profile Di1

%LINK-3-UPDOWN: Interface Virtual-Access2, changed state to down

-----------------------------------------------------------------------------------

5-2 PPPoE Client Router で CHAP 認証を設定した場合

5-1 で PAP 認証を設定し、接続で失敗しましたので、次に CHAP の設定で接続を試みました。5-1 とは異なり、PPPoE クライアント側で、CHAP 認証を設定していますので、CHAP CHALLENGE に対して CHAP RESPONSE を返信し、CHAP 認証が開始されますが、PPPoEサーバ側では、PAP 認証用に設定されているため、CHAP 認証は、完了しません。その後、PPPoE サーバから LCP の CONFREQ を受信し、再度 PAP 認証の LCP ネゴシエーションを行いますが、Client 側は PAP 認証は設定していないため、LCP ネゴシエーションに失敗し、セッションは終了となります。

以下は、接続に失敗する状況を説明しています。

CHAP 認証を開始しますが、完了しないうちに、LCP の CONF REQ (AuthProto PAP) を受信

Vi2 CHAP: Redirect packet to Vi2

Vi2 CHAP: I CHALLENGE id 1 len 26 from "PPPoE_Server"

Vi2 PPP: Sent CHAP SENDAUTH Request

Vi2 LCP: State is Open

Vi2 PPP: Received SENDAUTH Response FAIL

Vi2 CHAP: Using hostname from interface CHAP

Vi2 CHAP: Using password from interface CHAP

Vi2 CHAP: O RESPONSE id 1 len 26 from "PPPoE_Client"

Vi2 LCP: I CONFREQ [Open] id 1 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0x3CF0E3AB (0x05063CF0E3AB)

PPPoE Client 側の LCP が一旦 Down になり、LCP ネゴシエーションを再開しますが、PAP / CHAP の設定が合わない

Vi2 PPP DISC: PPP Renegotiating

Vi2 PPP: Sending Acct Event[Reneg] id[38]

PPP: NET STOP send to AAA.

Vi2 LCP: Event[LCP Reneg] State[Open to Open]

Vi2 LCP: Event[DOWN] State[Open to Starting]

Vi2 PPP: Phase is DOWN

        < 省略 >

Vi2 LCP: I CONFREQ [ACKrcvd] id 2 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0x3CC7AC81 (0x05063CC7AC81)

Vi2 LCP: O CONFNAK [ACKrcvd] id 2 len 9

Vi2 LCP:    AuthProto CHAP (0x0305C22305)

最終的には LCP ネゴシエーション失敗 (LCP failed to negotiate)

Vi2 LCP: Sent too many CONFNAKs.  Switch to CONFREJ

Vi2 LCP: Sent too many CONFREJs.  Closing CP

Vi2 PPP DISC: LCP failed to negotiate

PPPoE Client 側で CHAP を設定した場合のデバッグログのサンプル

-----------------------------------------------------------------------------------

%LINK-3-UPDOWN: Interface Virtual-Access2, changed state to up

Vi2 PPP: Sending cstate UP notification

Vi2 PPP: Processing CstateUp message

PPP: Alloc Context [30746044]

ppp73 PPP: Phase is ESTABLISHING

Vi2 PPP: Using dialer call direction

Vi2 PPP: Treating connection as a callout

Vi2 PPP: Session handle[3F000057] Session id[73]

Vi2 LCP: Event[OPEN] State[Initial to Starting]

Vi2 PPP: No remote authentication for call-out

Vi2 LCP: O CONFREQ [Starting] id 1 len 14

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    MagicNumber 0x8120C267 (0x05068120C267)

Vi2 LCP: Event[UP] State[Starting to REQsent]

Vi2 LCP: I CONFACK [REQsent] id 1 len 14

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    MagicNumber 0x8120C267 (0x05068120C267)

Vi2 LCP: Event[Receive ConfAck] State[REQsent to ACKrcvd]

Vi2 LCP: I CONFREQ [ACKrcvd] id 2 len 19

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto CHAP (0x0305C22305)

Vi2 LCP:    MagicNumber 0xB50CD1AF (0x0506B50CD1AF)

Vi2 LCP: O CONFACK [ACKrcvd] id 2 len 19

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto CHAP (0x0305C22305)

Vi2 LCP:    MagicNumber 0xB50CD1AF (0x0506B50CD1AF)

Vi2 LCP: Event[Receive ConfReq+] State[ACKrcvd to Open]

Vi2 PPP: Phase is AUTHENTICATING, by the peer

Vi2 LCP: State is Open

Vi2 CHAP: I CHALLENGE id 1 len 38 from "PPPoE_Server"

Vi2 PPP: Sent CHAP SENDAUTH Request

Vi2 PPP: Received SENDAUTH Response FAIL

Vi2 CHAP: Using hostname from interface CHAP

Vi2 CHAP: Using password from interface CHAP

Vi2 CHAP: O RESPONSE id 1 len 44 from "PPPoE_Client"

Vi2 LCP: I CONFREQ [Open] id 1 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0x3CC7AC81 (0x05063CC7AC81)

Vi2 PPP DISC: PPP Renegotiating

Vi2 PPP: Sending Acct Event[Reneg] id[65]

PPP: NET STOP send to AAA.

Vi2 LCP: Event[LCP Reneg] State[Open to Open]

Vi2 LCP: Event[DOWN] State[Open to Starting]

Vi2 PPP: Phase is DOWN

PPP: Alloc Context [30745E78]

ppp73 PPP: Phase is ESTABLISHING

Vi2 PPP: Using dialer call direction

Vi2 PPP: Treating connection as a callout

Vi2 PPP: Session handle[AE000058] Session id[73]

Vi2 LCP: Event[OPEN] State[Initial to Starting]

Vi2 PPP: No remote authentication for call-out

Vi2 LCP: O CONFREQ [Starting] id 1 len 14

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    MagicNumber 0x8120CA65 (0x05068120CA65)

Vi2 LCP: Event[UP] State[Starting to REQsent]

Vi2 LCP: I CONFREQ [REQsent] id 1 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0x3CC7AC81 (0x05063CC7AC81)

Vi2 LCP: O CONFNAK [REQsent] id 1 len 9

Vi2 LCP:    AuthProto CHAP (0x0305C22305)

Vi2 LCP: Event[Receive ConfReq-] State[REQsent to REQsent]

Vi2 LCP: I CONFACK [REQsent] id 1 len 14

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    MagicNumber 0x8120CA65 (0x05068120CA65)

Vi2 LCP: Event[Receive ConfAck] State[REQsent to ACKrcvd]

Vi2 LCP: I CONFREQ [ACKrcvd] id 2 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0x3CC7AC81 (0x05063CC7AC81)

Vi2 LCP: O CONFNAK [ACKrcvd] id 2 len 9

Vi2 LCP:    AuthProto CHAP (0x0305C22305)

Vi2 LCP: Event[Receive ConfReq-] State[ACKrcvd to ACKrcvd]

Vi2 LCP: I CONFREQ [ACKrcvd] id 3 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0x3CC7AC81 (0x05063CC7AC81)

Vi2 LCP: O CONFNAK [ACKrcvd] id 3 len 9

Vi2 LCP:    AuthProto CHAP (0x0305C22305)

Vi2 LCP: Event[Receive ConfReq-] State[ACKrcvd to ACKrcvd]

Vi2 LCP: I CONFREQ [ACKrcvd] id 4 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0x3CC7AC81 (0x05063CC7AC81)

Vi2 LCP: O CONFNAK [ACKrcvd] id 4 len 9

Vi2 LCP:    AuthProto CHAP (0x0305C22305)

Vi2 LCP: Event[Receive ConfReq-] State[ACKrcvd to ACKrcvd]

Vi2 LCP: I CONFREQ [ACKrcvd] id 5 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0x3CC7AC81 (0x05063CC7AC81)

Vi2 LCP: O CONFNAK [ACKrcvd] id 5 len 9

Vi2 LCP:    AuthProto CHAP (0x0305C22305)

Vi2 LCP: Event[Receive ConfReq-] State[ACKrcvd to ACKrcvd]

Vi2 LCP: I CONFREQ [ACKrcvd] id 6 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0x3CC7AC81 (0x05063CC7AC81)

Vi2 LCP: Sent too many CONFNAKs.  Switch to CONFREJ

Vi2 LCP: O CONFREJ [ACKrcvd] id 6 len 8

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP: Event[Receive ConfReq-] State[ACKrcvd to ACKrcvd]

Vi2 LCP: I CONFREQ [ACKrcvd] id 7 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0x3CC7AC81 (0x05063CC7AC81)

Vi2 LCP: Sent too many CONFNAKs.  Switch to CONFREJ

Vi2 LCP: O CONFREJ [ACKrcvd] id 7 len 8

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP: Event[Receive ConfReq-] State[ACKrcvd to ACKrcvd]

Vi2 LCP: I CONFREQ [ACKrcvd] id 8 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0x3CC7AC81 (0x05063CC7AC81)

Vi2 LCP: Sent too many CONFNAKs.  Switch to CONFREJ

Vi2 LCP: O CONFREJ [ACKrcvd] id 8 len 8

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP: Event[Receive ConfReq-] State[ACKrcvd to ACKrcvd]

Vi2 LCP: I CONFREQ [ACKrcvd] id 9 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0x3CC7AC81 (0x05063CC7AC81)

Vi2 LCP: Sent too many CONFNAKs.  Switch to CONFREJ

Vi2 LCP: O CONFREJ [ACKrcvd] id 9 len 8

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP: Event[Receive ConfReq-] State[ACKrcvd to ACKrcvd]

Vi2 LCP: I CONFREQ [ACKrcvd] id 10 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0x3CC7AC81 (0x05063CC7AC81)

Vi2 LCP: Sent too many CONFNAKs.  Switch to CONFREJ

Vi2 LCP: O CONFREJ [ACKrcvd] id 10 len 8

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP: Event[Receive ConfReq-] State[ACKrcvd to ACKrcvd]

Vi2 LCP: I CONFREQ [ACKrcvd] id 11 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0x3CC7AC81 (0x05063CC7AC81)

Vi2 LCP: Sent too many CONFNAKs.  Switch to CONFREJ

Vi2 LCP: O CONFREJ [ACKrcvd] id 11 len 8

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP: Event[Receive ConfReq-] State[ACKrcvd to ACKrcvd]

Vi2 LCP: I CONFREQ [ACKrcvd] id 12 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0x3CC7AC81 (0x05063CC7AC81)

Vi2 LCP: Sent too many CONFNAKs.  Switch to CONFREJ

Vi2 LCP: O CONFREJ [ACKrcvd] id 12 len 8

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP: Event[Receive ConfReq-] State[ACKrcvd to ACKrcvd]

Vi2 LCP: I CONFREQ [ACKrcvd] id 13 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0x3CC7AC81 (0x05063CC7AC81)

Vi2 LCP: Sent too many CONFNAKs.  Switch to CONFREJ

Vi2 LCP: O CONFREJ [ACKrcvd] id 13 len 8

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP: Event[Receive ConfReq-] State[ACKrcvd to ACKrcvd]

Vi2 LCP: I CONFREQ [ACKrcvd] id 14 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0x3CC7AC81 (0x05063CC7AC81)

Vi2 LCP: Sent too many CONFNAKs.  Switch to CONFREJ

Vi2 LCP: O CONFREJ [ACKrcvd] id 14 len 8

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP: Event[Receive ConfReq-] State[ACKrcvd to ACKrcvd]

Vi2 LCP: I CONFREQ [ACKrcvd] id 15 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0x3CC7AC81 (0x05063CC7AC81)

Vi2 LCP: Sent too many CONFNAKs.  Switch to CONFREJ

Vi2 LCP: Sent too many CONFREJs.  Closing CP

Vi2 PPP DISC: LCP failed to negotiate

Vi2 PPP: Sending Acct Event[Down] id[66]

PPP: NET STOP send to AAA.

Vi2 LCP: O TERMREQ [ACKrcvd] id 2 len 4

Vi2 LCP: Event[CLOSE] State[ACKrcvd to Closing]

Vi2 LCP: I TERMACK [Closing] id 2 len 4

Vi2 PPP: No remote authentication for call-out

Vi2 LCP: Event[Receive TermAck] State[Closing to Closed]

Vi2 LCP: Event[DOWN] State[Closed to Initial]

Vi2 PPP: Phase is DOWN

PPPoE : Shutting down client session

[0]PPPoE 34721: O PADT  R:000b.4529.ec38 L:7081.05c1.7ec2 Gi0/2

PPPoE: Failed to add PPPoE switching subblock

%DIALER-6-UNBIND: Interface Vi2 unbound from profile Di1

%LINK-3-UPDOWN: Interface Virtual-Access2, changed state to down

-----------------------------------------------------------------------------------

5-3 対策方法

5-1,5-2の確認の結果から、認証方法は PAP らしいということが確認できましたが、PAP 認証を設定しても、CHAP認証を設定しても、接続できないという結果になっています。このような場合は、以下のいずれかの方法で対応が可能です。

1) 認証方式として PAP認証を設定し、Dialer Interface に、"ppp chap refuse" を設定します。

"ppp chap refuse" を設定すると、PPPoE Server からの CHAP 認証での LCP ネゴシエーション要求(CONFREQ) に対して、CONFNAK を返信し、これを拒否します。その後すぐに、 PAP 認証でのネゴシエーションが開始され、効率良くセッションを確立することができます。

CAHPのLCPを拒否している様子

Vi2 LCP: O CONFREQ [Starting] id 1 len 14

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    MagicNumber 0x8113B1CE (0x05068113B1CE)

Vi2 LCP: Event[UP] State[Starting to REQsent]

Vi2 LCP: I CONFACK [REQsent] id 1 len 14

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    MagicNumber 0x8113B1CE (0x05068113B1CE)

Vi2 LCP: Event[Receive ConfAck] State[REQsent to ACKrcvd]

Vi2 LCP: I CONFREQ [ACKrcvd] id 2 len 19

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto CHAP (0x0305C22305)

Vi2 LCP:    MagicNumber 0xB559B0FD (0x0506B559B0FD)

Vi2 LCP: O CONFNAK [ACKrcvd] id 2 len 8

Vi2 LCP:    AuthProto EAP (0x0304C227)

Vi2 LCP: Event[Receive ConfReq-] State[ACKrcvd to ACKrcvd]

Vi2 LCP: O CONFREQ [ACKrcvd] id 2 len 14

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    MagicNumber 0x8113B1CE (0x05068113B1CE)

Vi2 LCP: Event[Timeout+] State[ACKrcvd to REQsent]

Vi2 LCP: I CONFREQ [REQsent] id 3 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0xB559B0FD (0x0506B559B0FD)

Vi2 LCP: O CONFACK [REQsent] id 3 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0xB559B0FD (0x0506B559B0FD)

Vi2 LCP: Event[Receive ConfReq+] State[REQsent to ACKsent]

Vi2 LCP: I CONFACK [ACKsent] id 2 len 14

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    MagicNumber 0x8113B1CE (0x05068113B1CE)

Vi2 LCP: Event[Receive ConfAck] State[ACKsent to Open]

2) 認証方式として、CHAP/PAP の両方を設定します。

CHAP/PAPの両方を設定した場合、5-2 と同じ流れで処理が進みます。5-2 では、CHAP の認証に失敗した後、PAP 認証で LCP のネゴシエーションに失敗する結果に終わっていましたが、両方の認証方式を設定していますので、PAP 認証での LCP のネゴシエーション ( CONFREQ) に CONFACK を返信することができます。このため、LCP のネゴシエーションに成功し、セッションを確立することができます。

CHAP認証に失敗した後、PAP 認証での LCP のネゴシエーション ( CONFREQ) に CONFACK を返信する様子

Vi2 LCP: I CONFREQ [REQsent] id 1 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0x3CFDAC74 (0x05063CFDAC74)

Vi2 LCP: O CONFACK [REQsent] id 1 len 18

Vi2 LCP:    MRU 1454 (0x010405AE)

Vi2 LCP:    AuthProto PAP (0x0304C023)

Vi2 LCP:    MagicNumber 0x3CFDAC74 (0x05063CFDAC74)

* CAHPのみ、PAPのみ設定して、接続できない場合は、"ppp chap refuse" もお試しください。

以上です。

Getting Started

検索バーにキーワード、フレーズ、または質問を入力し、お探しのものを見つけましょう

シスコ コミュニティをいち早く使いこなしていただけるよう役立つリンクをまとめました。みなさんのジャーニーがより良いものとなるようお手伝いします