Cable source-verify dhcp clarification. How it works !!! Cable-source-verify is a feature where the CMTS will watch the DHCP packets going by and only allow IP packets to flow to clients for which it has seen an IP address be assigned by DHCP.   It keeps an internal table (internal to the CMTS) of which clients are allowed to use which IP addresses. This basic code works independently of leasequery.   Let me say that again -- this basic code does *not*, repeat *not* require leasequery to work.   It is implemented entirely within the CMTS. Leasequery comes into play *after* the CMTS has been rebooted and has cable-source-verify enabled.   At that point, it doesn't know which clients go with which IP addresses, and will prevent *anything* from happening (except DHCP transactions).   So, nothing works at that point -- except that the CMTS will use leasequery requests to the DHCP server to see if the DHCP server knows something about a client that the CMTS does not.   And so, over time, the CMTS will rebuild its internal table by using leasequery requests, and everything will operate correctly. So, it is perfectly reasonable that you can have a CMTS which will prevent a device which has not done a DHCP transaction from using an IP address even if you are using a DHCP server which is not CNR (or, more accurately, which does not support leasequery). The best way to configure CMTS is using “no cable arp” and “cable source-verify dhcp”. When you configure both, you are basically telling the CMTS that the only means of resolving the IP address is via DHCP. “Arp timeout” should be set to reasonable value. After arp timeout CMTS will delete CPE from the database. Now if there is a packet for or from cpe on cmts,   the CMTS will send leasequery to dhcp server for revalidation and once the dhcp reply is received from the dhcp server,c pe will back in the database. The CMTS can send out DHCP LQ under several scenarios. 1. CMTS receives a packet from a CPE in the US with an IP address that is not in the CMTS database. 2. CMTS receives a packets to be sent to an IP address that is not available in the database.   Now if "no cable arp" is configured, the CMTS sends out DHCP LQ in order to resolve this IP address. 3. When leasetimer feature is enabled and when LQ timer is expired.   However these are not filtered via the leasequery-filter.   The CMTS knows about the leasetime since it snoops the DHCP packets for the CPEs. When you have just "cable source-verify" configured, the CMTS just relies on what it learns from DHCP to determine whether the source is authentic or not (And ARP if ARP is not disabled).   It does not pro-actively send DHCP LQ to learn about hosts. Note that some servers *other* than CNR support the Cisco legacy version of leasequery. There are two forms of Leasequery, the Cisco legacy version and the RFC4388 version.   The Cisco legacy version has been in the product for at least 5 years, and will continue to be supported for as long as CNR is a product. The RFC4388 version has been supported since CNR 7.0 was released, 12/27/2007.   It too will be supported essentially forever. To the best of my knowledge, Cisco IOS devices today use the Cisco legacy version of leasequery, and I have no idea when (or if) they plan to change.   It doesn't matter, because either are supported. FAQ: Q1: When both "cable source verify dhcp" and "cable arp" are configured.   In this scenario when a packet needs to be sent to or is received from an unknown IP which takes precedence, the lease query or the arp? A- For a packet coming from an unauthorized source, in the US direction, we always use DHCP LQ when "dhcp" option is used.   ARP has no say here. It is only in the DS direction that ARP makes difference.   If "cable arp" is enabled and CMTS sees a packet destined to unknown destination address, then the CMTS uses ARP to resolve the address.   So, to answer your question, ARP takes precedence. Q2: I am seeing following in my CMTS, CMTS#show cable leasequery-filter Lease Query Filter statistics for Unknown Sid   Requests Sent : 0 total. 0 unfiltered, 0 filtered Is that normal? A2: I know that you claim that "cable source-verify dhcp" is enabled.   But please verify it on this CMTS. I doubt if it is enabled. Anyway, what you are seeing here is the number of DHCP LQs that were sent as a result of a DS packet to an un-authorized IP address.   This should count up when "cable source-verify dhcp" is configured.   If you want at the SID level, try "show cable leasequery-filter <interface> requests-filtered" Q3 : How to prove that cmts have send out lease query packet? Does the command " show cable leasequery-filter " can check it while customer do not config lease query filter? I have suggest customer to config downstream filter and upstream filter, but they still can not find "requests send" counter increase at this command. A3 : What release are you using?   I don’t know if the lease query filter is enabled by default with some values. I can   check when you tell me the release information. Q4: If dhcp server do not send lease query ack packet to cmts, what will cmts do next? A4: If the CMTS does not hear from the server, it will keep sending the DHCP LQ.   This is where the leasequery-filter comes into play and drop excessive requests. Q5 : Customer use some cnr and some other dhcp server, how to make sure that customer's dhcp server support lease query reply? I means maybe some other brand dhcp server may only support RFC4388 and do not support Cisco legacy version. A5: You may need to consult the technical documentation of the 3rd party DHCP server to see what form of DHCP LQ does that support. Q6 : As far as we understand, this is a way to prevent unauthorized IP addresses (including the ones statically set by the subscribers) from accessing the network.   It is accomplished by the CMTS sending DHCP Lease-Query to CNR and with appropriate response, the traffic from the subscriber is allowed to be forwarded.   In any case this mechanism and/or message format does not follow the standard. What RFCs or standards do we follow in our Lease-Query messages? A6 : The behavior is defined by RFC 4388.   But we don t support that yet.   We support the behavior that was specified in an earlier draft. Q7.1: Even without the DHCP server responding to the Lease-Query, the subscriber can be allowed to access the network?   Q7.2: If the customer is using a non-CNR DHCP server which do not support Lease-Query responses... and the subscriber can access the network?   Cable source-verify dhcp is enabled in this scenario. A7 : No. If dhcp server do not respond to LQ, cmts will keep on sending it and the subscriber will not get access to the network. ... View more

Introduction: This document talks about the LNS configuration and troubleshooting which terminates PPP connection from PPPoE client over L2TP. For PPPoE client configuration, visit https://supportforums.cisco.com/docs/DOC-6050 For LAC configuration and troubleshooting, visit https://supportforums.cisco.com/docs/DOC-6101 In this setup, if any user comes in with cisco.com as a domain name as a part of the username ( for exa. ParamPreet@cisco.com) , it will be tunneled to LNS via L2TP. Users with username other than using cisco.com as a domain name will be terminated locally on this router as a LAC. Topology:     C10K#sh run Building configuration... Current configuration : 14917 bytes ! <snip> aaa new-model ! ! aaa authentication ppp default local ! Local database to be used for authentication aaa authorization network default none ! Local authorization to be used aaa session-id common ip subnet-zero no ip domain lookup ! vpdn enable ! vpdn-group LNS ! VPDN group config to terminate tunnel from LAC accept-dialin ! To configure the router as LNS/HGW   protocol l2tp ! Tunnel protocol is L2TP   virtual-template 1 ! Interface on which   PPP users will be terminated terminate-from hostname LAC source-ip 172.16.167.54 local name LNS l2tp tunnel password 0 cisco !Username and password to be used for tunnel authentication ! ! redundancy username cisco password 0 cisco username C2821-CPE password 0 cisco username ParamPreet@cisco.com password 0 cisco username ASR1006 password 0 cisco username LAC password 0 cisco username LNS password 0 cisco ! ! ! ! !          interface Loopback0 ip address 20.20.20.1 255.255.255.0 ! interface Loopback1 no ip address ! interface FastEthernet0/0/0 ip address 172.16.167.54 255.255.255.224 duplex full speed 100 ! ! <snip> interface Virtual-Template1 ! Interaface on which incoming user PPP session will be terminated ip unnumbered Loopback0 peer default ip address pool PPPoE-POOL ! Ip address pool from which the ip address will be allocated to the PPP users ppp authentication chap callin ppp timeout idle 600 either ! ip local pool PPPoE-POOL 20.20.20.2 20.20.20.254 ! ip classless ip route 0.0.0.0 0.0.0.0 172.16.167.33 no ip http server no ip http secure-server ! ! ! cdp run nls resp-timeout 1 cpd cr-id 1 ! ! line con 0 ! line aux 0 privilege level 15 password cisco line vty 0 4 exec-timeout 60 0 privilege level 15 password cisco logging synchronous line vty 5 10 exec-timeout 60 0 privilege level 15 password cisco logging synchronous ! end The      client calls/connects the LAC (typically using PPPoE/ATM , modem or an      ISDN card). The      client and the LAC starts the PPP phase by negotiating the LCP options      (authentication method Password Authentication Protocol [PAP] or Challenge      Handshake Authentication Protocol [CHAP], PPP multilink, compression, and      so on). Let's      suppose that CHAP has been negotiated in step 2. The LAC sends a CHAP      challenge to the client. The      LAC gets a response (for instance username@DomainName and password). Based      on the domain name received in the CHAP response or the Dialed Number      Information Service (DNIS) received in the ISDN setup message, the LAC      checks whether the client is a VPDN/L2TP user. It does this by using its      local VPDN configuration or contacting an Authentication, Authorization,      and Accounting (AAA) server. Because      the client is a VPDN user, the LAC gets some information (from its local      VPDN configuration or from an AAA server) that it uses to bring up a L2TP   tunnel with the LNS. The      LAC brings up a L2TP tunnel with the LNS. Based      on the name received in the request from the LAC, the LNS checks if the      LAC is allowed to open a tunnel (the LNS checks its local VPDN      configuration). Moreover, the LAC and the LNS authenticate each other      (they use their local database or contact an AAA server). The Tunnel is      then up between both devices. In this tunnel, several VPDN sessions can be      carried. For      the client username@DomainName, a VPDN session is triggered from the LAC      to the LNS. There is one VPDN session per client. The      LAC forwards the LCP options it has negotiated to the LNS with the client      along with the username@DomainName and password received from the client. The      LNS clones a virtual-access from a virtual-template specified in the VPDN      configuration. The LNS takes the LCP options received from the LAC and      authenticate the client locally or by contacting the AAA server. The      LNS sends a CHAP response to the client. The      IP Control Protocol (IPCP) phase is performed and then the route is      installed: the PPP session is up and running between the client and the      LNS. The LAC just forwards the PPP frames. The PPP frames are tunneled      between the LAC and the LNS. Tunnel setup messages along with user session setup messages that are being exchanged between LAC and LNS. The LAC decides that a tunnel must be initiated from the LAC to the LNS. 1.      The LAC sends a Start-Control-Connection-Request (SCCRQ). A CHAP challenge and AV Pairs are included in this message. 2.      The LNS responds with a Start-Control-Connection-Reply (SCCRP). A CHAP challenge, the response to LAC's challenge and AV Pairs are included in this message. 3.      The LAC sends a Start-Control-Connection-Connected (SCCCN). The CHAP response is included in this message. 4.      The LNS responds with a Zero-Length Body Acknowledgement (ZLB ACK). That acknowledgement may be carried in another message. The tunnel is up. 5.      The LAC sends an Incoming-Call-Request (ICRQ) to the LNS. 6.      The LNS responds with an Incoming-Call-Reply (ICRP) message. 7.      The LAC sends an Incoming-Call-Connected (ICCN). 8.      The LNS responds back with a ZLB ACK. That acknowledgement may also be carried in another message. 9.      The session is up. Note: The messages above used for opening a tunnel or a session carry Attribute Value Pairs (AVPs) defined in RFC 2661. They describe properties and information (such as Bearercap, hostname, vendor name and window size). Some AV pairs are mandatory and others are optional. Note: A Tunnel ID is used to multiplex and demultiplex tunnels between the LAC and LNS. A session ID is used to identify a particular session with the tunnel. For L2F, the setup for tunneling a PPP session is the same as for L2TP. It involves: 1.      Establishing a tunnel between the NAS and the Home Gateway. This phase takes place only when there is no active tunnel between both devices. 2.      Establishing a session between the NAS and the Home Gateway. C10K#sh debug General OS:   AAA Authentication debugging is on   AAA Authorization debugging is on PPP:   PPP authentication debugging is on   PPP protocol negotiation debugging is on VPN:   L2X protocol events debugging is on   L2X control packets debugging is on   L2X protocol errors debugging is on   VPDN events debugging is on   VPDN errors debugging is on   VPDN packet debugging is on *Sep 20 21:26:34.343: AAA/BIND(00000006): Bind i/f   *Sep 20 21:26:34.343: AAA/AUTHEN/LOGIN (00000006): Pick method list 'Permanent Local' C10K# *Sep 20 21:26:36.355: AAA/AUTHOR (00000006): Method list id=0 not configured. Skip author C10K# *Sep 20 21:27:14.643: VPDN FS From tunnel: Received 184 byte pak *Sep 20 21:27:14.643: VPDN FS From tunnel: Pak consumed *Sep 20 21:27:14.643: L2X: Parse   AVP 0, len 8, flag 0x8000 (M) *Sep 20 21:27:14.643: L2X: Parse SCCRQ *Sep 20 21:27:14.643: L2X: Parse   AVP 2, len 8, flag 0x8000 (M) *Sep 20 21:27:14.643: L2X: Protocol Ver 256 *Sep 20 21:27:14.643: L2X: Parse   AVP 3, len 10, flag 0x8000 (M) *Sep 20 21:27:14.643: L2X: Framing Cap 0x0 *Sep 20 21:27:14.643: L2X: Parse   AVP 6, len 8, flag 0x0 *Sep 20 21:27:14.643: L2X: Firmware Ver 0x1130 *Sep 20 21:27:14.643: L2X: Parse   AVP 7, len 9, flag 0x8000 (M) *Sep 20 21:27:14.643: L2X: Hostname LAC *Sep 20 21:27:14.643: L2X: Parse   AVP 8, len 25, flag 0x0 *Sep 20 21:27:14.643: L2X: Vendor Name Cisco Systems, Inc. *Sep 20 21:27:14.643: L2X: Parse   AVP 9, len 8, flag 0x8000 (M) *Sep 20 21:27:14.643: L2X: Assigned Tunnel ID 16382 *Sep 20 21:27:14.643: L2X: Parse   AVP 10, len 8, flag 0x8000 (M) *Sep 20 21:27:14.643: L2X: Rx Window Size 1024 *Sep 20 21:27:14.643: L2X: Parse   AVP 11, len 22, flag 0x8000 (M) *Sep 20 21:27:14.643: L2X: Chlng               2F 57 56 FD 44 73 5E 0A 7F 6F 53 8C 0D 24 ED F2 *Sep 20 21:27:14.643: L2X: Parse   AVP 56, len 6, flag 0x0 *Sep 20 21:27:14.643: L2X: Unknown   AVP 56 in CM SCCRQ *Sep 20 21:27:14.643: L2X: Ignoring unknown   AVP 56 *Sep 20 21:27:14.643: L2X: Unknown AVP found during length verification. AVP is 56, vendor code is 0, len is 6 *Sep 20 21:27:14.643: L2X: Ignoring unknown   AVP 56 *Sep 20 21:27:14.643: L2X: Parse   AVP 57, len 6, flag 0x0 *Sep 20 21:27:14.643: L2X: Unknown   AVP 57 in CM SCCRQ *Sep 20 21:27:14.643: L2X: Ignoring unknown   AVP 57 *Sep 20 21:27:14.643: L2X: Unknown AVP found during length verification. AVP is 57, vendor code is 0, len is 6 *Sep 20 21:27:14.643: L2X: Ignoring unknown   AVP 57 *Sep 20 21:27:14.643: L2X: Parse Cisco AVP 110, len 6, flag 0x0 *Sep 20 21:27:14.643: L2X: Cisco AVP 110 is not for SCCRQ *Sep 20 21:27:14.643: L2X: Unknown AVP found during length verification. AVP is 110, vendor code is 9, len is 6 *Sep 20 21:27:14.643: L2X: Ignoring unknown Cisco AVP 110 *Sep 20 21:27:14.643: L2X: Parse Cisco AVP 111, len 6, flag 0x0 *Sep 20 21:27:14.643: L2X: Cisco AVP 111 is not for SCCRQ *Sep 20 21:27:14.643: L2X: Unknown AVP found during length verification. AVP is 111, vendor code is 9, len is 6 *Sep 20 21:27:14.643: L2X: Ignoring unknown Cisco AVP 111 *Sep 20 21:27:14.643: L2X: No missing AVPs in SCCRQ *Sep 20 21:27:14.643: L2X: I SCCRQ, flg TLS, ver 2, len 142, tnl 0, cl 0, ns 0, nr 0 contiguous pak, size 142             C8 02 00 8E 00 00 00 00 00 00 00 00 80 08 00 00             00 00 00 01 80 08 00 00 00 02 01 00 80 0A 00 00             00 03 00 00 00 00 00 08 00 00 00 06 11 30 80 09             00 00 00 07 4C 41 43 00 19 00 00 00 08 43 69 73             63 6F 20 53 79 73 74 65 ... *Sep 20 21:27:14.643: L2TP: I SCCRQ from LAC tnl 16382 ! SCCRQ for tunnel setup received from LAC *Sep 20 21:27:14.643:   Tnl 8468 L2TP: Got a challenge in SCCRQ, LAC *Sep 20 21:27:14.643:   Tnl 8468 L2TP: New tunnel created for remote LAC, address 172.16.163.48 *Sep 20 21:27:14.643:   Tnl 8468 L2TP: O SCCRP   to LAC tnlid 16382 ! RSCCRP sent from LNS *Sep 20 21:27:14.643:   Tnl 8468 L2TP: O SCCRP, flg TLS, ver 2, len 150, tnl 16382, cl 0, ns 0, nr 1             C8 02 00 96 3F FE 00 00 00 00 00 01 80 08 00 00             00 00 00 02 80 08 00 00 00 02 01 00 80 0A 00 00             00 03 00 00 00 00 80 0A 00 00 00 04 00 00 00 00             00 08 00 00 00 06 11 20 80 09 00 00 00 07 4C 4E             53 00 19 00 00 00 08 ... *Sep 20 21:27:14.643:   Tnl 8468 L2TP: Control channel retransmit delay set to 1 seconds *Sep 20 21:27:14.643:   Tnl 8468 L2TP: Tunnel state change from idle to wait-ctl-reply *Sep 20 21:27:14.647: VPDN FS From tunnel: Received 84 byte pak *Sep 20 21:27:14.647: VPDN FS From tunnel: Pak consumed *Sep 20 21:27:14.647:   Tnl 8468 L2TP: Parse   AVP 0, len 8, flag 0x8000 (M) *Sep 20 21:27:14.647:   Tnl 8468 L2TP: Parse SCCCN *Sep 20 21:27:14.647:   Tnl 8468 L2TP: Parse   AVP 13, len 22, flag 0x8000 (M) *Sep 20 21:27:14.647:   Tnl 8468 L2TP: Chlng Resp               31 92 AC F1 88 35 88 2C DA 97 CA 74 3F C1 E9 4D *Sep 20 21:27:14.647:   Tnl 8468 L2TP: No missing AVPs in SCCCN *Sep 20 21:27:14.647:   Tnl 8468 L2TP: I SCCCN, flg TLS, ver 2, len 42, tnl 8468, cl 0, ns 1, nr 1 ! SCCN is received from LAC to complete Tunnel authentication and setup contiguous pak, size 42             C8 02 00 2A 21 14 00 00 00 01 00 01 80 08 00 00             00 00 00 03 80 16 00 00 00 0D 31 92 AC F1 88 35             88 2C DA 97 CA 74 3F C1 E9 4D *Sep 20 21:27:14.647:   Tnl 8468 L2TP: O ZLB ctrl ack, flg TLS, ver 2, len 12, tnl 16382, cl 0, ns 1, nr 2             C8 02 00 0C 3F FE 00 00 00 01 00 02 *Sep 20 21:27:14.647:   Tnl 8468 L2TP: I SCCCN from LAC tnl 16382 *Sep 20 21:27:14.647:   Tnl 8468 L2TP: Got a Challenge Response in SCCCN from LAC *Sep 20 21:27:14.647:   Tnl 8468 L2TP: Tunnel Authentication success *Sep 20 21:27:14.647:   Tnl 8468 L2TP: Tunnel state change from wait-ctl-reply to established *Sep 20 21:27:14.647:   Tnl 8468 L2TP: SM State established *Sep 20 21:27:14.647: VPDN FS From tunnel: Received 105 byte pak *Sep 20 21:27:14.647: VPDN FS From tunnel: Pak consumed *Sep 20 21:27:14.647:   Tnl 8468 L2TP: Parse   AVP 0, len 8, flag 0x8000 (M) *Sep 20 21:27:14.647:   Tnl 8468 L2TP: Parse ICRQ *Sep 20 21:27:14.647:   Tnl 8468 L2TP: Parse   AVP 14, len 8, flag 0x8000 (M) *Sep 20 21:27:14.647:   Tnl 8468 L2TP: Assigned Call ID 25529 *Sep 20 21:27:14.647:   Tnl 8468 L2TP: Parse   AVP 15, len 10, flag 0x8000 (M) *Sep 20 21:27:14.647:   Tnl 8468 L2TP: Serial Number -1237467294 *Sep 20 21:27:14.651:   Tnl 8468 L2TP: Parse   AVP 18, len 10, flag 0x8000 (M) *Sep 20 21:27:14.651:   Tnl 8468 L2TP: Bearer Type 0 *Sep 20 21:27:14.651:   Tnl 8468 L2TP: Parse Cisco AVP 100, len 15, flag 0x0 *Sep 20 21:27:14.651:   Tnl 8468 L2TP: Client NAS Port               0F 10 09 02 03 01 00 02 9A *Sep 20 21:27:14.651:   Tnl 8468 L2TP: No missing AVPs in ICRQ *Sep 20 21:27:14.651:   Tnl 8468 L2TP: I ICRQ, flg TLS, ver 2, len 63, tnl 8468, cl 0, ns 2, nr 1 contiguous pak, size 63             C8 02 00 3F 21 14 00 00 00 02 00 01 80 08 00 00             00 00 00 0A 80 08 00 00 00 0E 63 B9 80 0A 00 00             00 0F B6 3D BF 62 80 0A 00 00 00 12 00 00 00 00             00 0F 00 09 00 64 0F 10 09 02 03 01 00 02 9A *Sep 20 21:27:14.651:   Tnl 8468 L2TP: I ICRQ from LAC tnl 16382 ! User session information is forwarded from LAC *Sep 20 21:27:14.651:   Tnl/Sn 8468/3 L2TP: Session FS enabled *Sep 20 21:27:14.651:   Tnl/Sn 8468/3 L2TP: Session state change from idle to wait-connect *Sep 20 21:27:14.651:   Tnl/Sn 8468/3 L2TP: New session created *Sep 20 21:27:14.651:   Tnl/Sn 8468/3 L2TP: O ICRP to LAC 16382/25529 *Sep 20 21:27:14.651:   Tnl/Sn 8468/3 L2TP: O ICRP, flg TLS, ver 2, len 28, tnl 16382, cl 25529, ns 1, nr 3             C8 02 00 1C 3F FE 63 B9 00 01 00 03 80 08 00 00             00 00 00 0B 80 08 00 00 00 0E 00 03 *Sep 20 21:27:14.651:   Tnl 8468 L2TP: Control channel retransmit delay set to 1 seconds *Sep 20 21:27:14.651: VPDN FS From tunnel: Received 60 byte pak *Sep 20 21:27:14.651: VPDN FS From tunnel: Pak consumed *Sep 20 21:27:14.655: VPDN FS From tunnel: Received 213 byte pak *Sep 20 21:27:14.655: VPDN FS From tunnel: Pak consumed *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Parse   AVP 0, len 8, flag 0x8000 (M) *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Parse ICCN *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Parse   AVP 19, len 10, flag 0x8000 (M) *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Framing Type 1 *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Parse   AVP 24, len 10, flag 0x8000 (M) *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Connect Speed 100000000 *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Parse   AVP 27, len 21, flag 0x0 *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Last Sent LCPREQ               01 04 05 DC 03 05 C2 23 05 05 06 24 80 DE 05 *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Parse   AVP 28, len 12, flag 0x0 *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Last Rx LCPREQ               05 06 1C 3F 13 95 *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Parse   AVP 29, len 8, flag 0x0 *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Proxy Auth Type 2 *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Parse   AVP 30, len 21, flag 0x0 *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Proxy Auth Name ParamPreet@cisco.com *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Parse   AVP 31, len 22, flag 0x0 *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Proxy Auth Chal               A9 09 74 32 2B C5 0C 65 C9 B8 D2 42 29 31 E9 43 *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Parse   AVP 32, len 8, flag 0x0 *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Proxy Auth ID 1 *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Parse   AVP 33, len 22, flag 0x0 *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Proxy Auth Resp               97 54 33 E9 B2 53 2E 42 3E 1B C9 48 14 24 FE C8 *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Parse   AVP 38, len 10, flag 0x0 *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Rx Speed 100000000 *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Parse Cisco AVP 107, len 7, flag 0x0 *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: Fixed CHAP Challenge ID 0 *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: No missing AVPs in ICCN *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: I ICCN, flg TLS, ver 2, len 171, tnl 8468, cl 3, ns 3, nr 2 contiguous pak, size 171             C8 02 00 AB 21 14 00 03 00 03 00 02 80 08 00 00             00 00 00 0C 80 0A 00 00 00 13 00 00 00 01 80 0A             00 00 00 18 05 F5 E1 00 00 15 00 00 00 1B 01 04             05 DC 03 05 C2 23 05 05 06 24 80 DE 05 00 0C 00             00 00 1C 05 06 1C 3F 13 ... *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: O ZLB ctrl ack, flg TLS, ver 2, len 12, tnl 16382, cl 0, ns 2, nr 4             C8 02 00 0C 3F FE 00 00 00 02 00 04 *Sep 20 21:27:14.655:   Tnl/Sn 8468/3 L2TP: I ICCN from LAC tnl 16382, cl 25529 *Sep 20 21:27:14.659: ParamPreet@cisco.com Tnl/Sn 8468/3 L2TP: Session state change from wait-connect to wait-for-service-selection *Sep 20 21:27:14.659: AAA/BIND(00000007): Bind i/f Virtual-Template1 *Sep 20 21:27:14.659: AAA/AUTHOR (00000007): Method=None for method list id=00000000. Skip author *Sep 20 21:27:14.659: ppp2 PPP: Authorization NOT required *Sep 20 21:27:14.659: ppp2 PPP: Phase is ESTABLISHING *Sep 20 21:27:14.659: ppp2 PPP: Send Message[Dynamic Bind Response] *Sep 20 21:27:14.659: ppp2 LCP: I FORCED rcvd CONFACK len 15 *Sep 20 21:27:14.659: ppp2 LCP:     MRU 1500 (0x010405DC) *Sep 20 21:27:14.659: ppp2 LCP:     AuthProto CHAP (0x0305C22305) *Sep 20 21:27:14.659: ppp2 LCP:     MagicNumber 0x2480DE05 (0x05062480DE05) *Sep 20 21:27:14.659: ppp2 LCP: I FORCED sent CONFACK len 6 *Sep 20 21:27:14.659: ppp2 LCP:     MagicNumber 0x1C3F1395 (0x05061C3F1395) ! Forced LCP from LNS in the event of mismatch on LCP parameters negotiated by LAC *Sep 20 21:27:14.659: ppp2 PPP: Phase is FORWARDING, Attempting Forward *Sep 20 21:27:14.659: ppp2 PPP: Phase is AUTHENTICATING, Unauthenticated User *Sep 20 21:27:14.659: AAA/AUTHEN/PPP (00000007): Pick method list 'default' *Sep 20 21:27:14.659: ppp2 PPP: Sent CHAP LOGIN Request *Sep 20 21:27:14 C10K#.659: ppp2 PPP: Received LOGIN Response PASS *Sep 20 21:27:14.659: ppp2 PPP: Phase is FORWARDING, Attempting Forward *Sep 20 21:27:14.659: ppp2 PPP: Send Message[Connect Local] *Sep 20 21:27:14.659: Vi2.1 Tnl/Sn 8468/3 L2TP: Virtual interface created for ParamPreet@cisco.com , bandwidth 100000 Kbps *Sep 20 21:27:14.659: ppp2 PPP: Bind to [Virtual-Access2.1] *Sep 20 21:27:14.659: AAA/BIND(00000007): Bind i/f Virtual-Access2.1 *Sep 20 21:27:14.659: Vi2.1 PPP: Send Message[Static Bind Response] *Sep 20 21:27:14.659: Vi2.1 Tnl/Sn 8468/3 L2TP: VPDN session up *Sep 20 21:27:14.659: Vi2.1 Tnl/Sn 8468/3 L2TP: Session state change from wait-for-service-selection to established *Sep 20 21:27:14.659: Vi2.1 PPP: Phase is AUTHENTICATING, Authenticated User *Sep 20 21:27:14.659: Vi2.1 CHAP: O SUCCESS id 1 len 4 ! Authentication succeeded   for incoming user *Sep 20 21:27:14.659: Vi2.1 VPDN FS Network to tunnel: Punted 44 byte pak to l2x process queue *Sep 20 21:27:14.659: Vi2.1 PPP: Phase is UP *Sep 20 21:27:14.659: Vi2.1 AAA/AUTHOR/FSM: We can start IPCP *Sep 20 21:27:14.663: Vi2.1 IPCP: O CONFREQ [Closed] id 1 len 10 ! IPCP phase started for IP address negotiation for incoming user *Sep 20 21:27:14.663: Vi2.1 IPCP:     Address 20.20.20.1 (0x030614141401) *Sep 20 21:27:14.663: Vi2.1 VPDN FS Network to tunnel: Punted 50 byte pak to l2x process queue *Sep 20 21:27:14.663: Vi2.1 PPP: Process pending ncp packets *Sep 20 21:27:14.663: Vi2.1 VPDN PROCESS Into tunnel: Sending 44 byte pak *Sep 20 21:27:14.663: Vi2.1 VPDN PROCESS Into tunnel: Sending 50 byte pak *Sep 20 21:27:14.663: VPDN FS From tunnel: Received 64 byte pak *Sep 20 21:27:14.663: Vi2.1 VPDN FS Tunnel to network: Sending 14 byte pak *Sep 20 21:27:14.663: Vi2.1 VPDN FS Tunnel to network: Fastswitching failed, punting pkt to process *Sep 20 21:27:14.663: Vi2.1 VPDN FS From tunnel: Punted 14 byte pak to ppp parse and iqueue *Sep 20 21:27:14.663: VPDN FS From tunnel: Received 60 byte pak *Sep 20 21:27:14.663: Vi2.1 VPDN FS Tunnel to network: Sending 8 byte pak *Sep 20 21:27:14.663: Vi2.1 VPDN FS Tunnel to network: Fastswitching failed, punting pkt to process *Sep 20 21:27:14.663: Vi2.1 VPDN FS From tunnel: Punted 8 byte pak to ppp parse and iqueue *Sep 20 21:27:14.663: VPDN FS From tunnel: Received 64 byte pak *Sep 20 21:27:14.663: Vi2.1 VPDN FS Tunnel to network: Sending 14 byte pak *Sep 20 21:27:14.663: Vi2.1 VPDN FS Tunnel to network: Fastswitching failed, punting pkt to process *Sep 20 21:27:14.663: Vi2.1 VPDN FS From tunnel: Punted 14 byte pak to ppp parse and iqueue *Sep 20 21:27:14.663: Vi2.1 IPCP: I CONFREQ [REQsent] id 1 len 10 *Sep 20 21:27:14.663: Vi2.1 IPCP:     Address 0.0.0.0 (0x030600000000) *Sep 20 21:27:14.667: Vi2.1 IPCP: Pool returned 20.20.20.2 *Sep 20 21:27:14.667: Vi2.1 IPCP: O CONFNAK [REQsent] id 1 len 10 *Sep 20 21:27:14.667: Vi2.1 IPCP:     Address 20.20.20.2 (0x030614141402) *Sep 20 21:27:14.667: Vi2.1 VPDN FS Network to tunnel: Punted 50 byte pak to l2x process queue *Sep 20 21:27:14.667: Vi2.1 IPCP: I CONFACK [REQsent] id 1 len 10 *Sep 20 21:27:14.667: Vi2.1 IPCP:     Address 20.20.20.1 (0x030614141401) *Sep 20 21:27:14.667: Vi2.1 CDPCP: I CONFREQ [Not negotiated] id 1 len 4 *Sep 20 21:27:14.667: Vi2.1 LCP: O PROTREJ [Open] id 1 len 10 protocol CDPCP (0x820701010004) *Sep 20 21:27:14.667: Vi2.1 VPDN FS Network to tunnel: Punted 50 byte pak to l2x process queue *Sep 20 21:27:14.667: Vi2.1 VPDN PROCESS Into tunnel: Sending 50 byte pak *Sep 20 21:27:14.667: Vi2.1 VPDN PROCESS Into tunnel: Sending 50 byte pak *Sep 20 21:27:14.667: VPDN FS From tunnel: Received 64 byte pak *Sep 20 21:27:14.667: Vi2.1 VPDN FS Tunnel to network: Sending 14 byte pak *Sep 20 21:27:14.667: Vi2.1 VPDN FS Tunnel to network: Fastswitching failed, punting pkt to process *Sep 20 21:27:14.667: Vi2.1 VPDN FS From tunnel: Punted 14 byte pak to ppp parse and iqueue *Sep 20 21:27:14.667: Vi2.1 IPCP: I CONFREQ [ACKrcvd] id 2 len 10 *Sep 20 21:27:14.667: Vi2.1 IPCP:     Address 20.20.20.2 (0x030614141402) *Sep 20 21:27:14.667: Vi2.1 IPCP: O CONFACK [ACKrcvd] id 2 len 10 *Sep 20 21:27:14.667: Vi2.1 IPCP:     Address 20.20.20.2 (0x030614141402) *Sep 20 21:27:14.667: Vi2.1 VPDN FS Network to tunnel: Punted 50 byte pak to l2x process queue *Sep 20 21:27:14.667: Vi2.1 IPCP: State is Open *Sep 20 21:27:14.667: Vi2.1 VPDN PROCESS Into tunnel: Sending 50 byte pak *Sep 20 21:27:14.667: Vi2.1 IPCP: Install route to 20.20.20.2 C10K#sh users     Line        User        Host(s)               Idle        Location    0 con 0                 idle                  01:28:14       2 vty 0      cisco       idle                  00:08:57 10.82.211.163 *   3 vty 1      cisco       idle                  00:00:00 171.69.89.47    4 vty 2      cisco       idle                  00:00:48 10.82.248.114   Interface     User                Mode          Idle      Peer Address   Vi2.1         ParamPreet@cisco.com     PPPoVPDN      00:00:26 20.20.20.2 C10K#sh int virtual-a2.1 Virtual-Access2.1 is up, line protocol is up   Hardware is Virtual Access interface   Interface is unnumbered. Using address of Loopback0 (20.20.20.1)   MTU 1500 bytes, BW 100000 Kbit, DLY 100000 usec,      reliability 255/255, txload 1/255, rxload 1/255   Encapsulation PPP, LCP Open   Open: IPCP   PPPoVPDN vaccess, cloned from Virtual-Template1   Vaccess status 0x0   Protocol l2tp, tunnel id 64102, session id 5   Keepalive set (10 sec)      43 packets input, 1466 bytes      40 packets output, 1064 bytes idle 00:07:49   Last clearing of "show interface" counters never C10K#sh caller timeouts   Line            User                Limit      Remaining Timer Type   con 0           -                   -          -          -            vty 3           cisco               01:00:00   00:59:59   Idle Exec   Vi2.1           ParamPreet@cisco.com     00:10:00   00:09:20   PPP idle C10K#sh caller user ParamPreet@cisco.com detailed   User: ParamPreet@cisco.com , line Vi2.1, service PPPoVPDN         Connected for 00:04:18, Idle for 00:01:18   Timeouts:     Limit      Remaining Timer Type                00:10:00   00:08:41   PPP idle   PPP: LCP Open, CHAP (<-), IPCP   LCP: -> peer, MRU, AuthProto, MagicNumber        <- peer, MagicNumber   NCP: Open IPCP   IPCP: <- peer, Address         -> peer, Address   IP: Local 20.20.20.1, remote 20.20.20.2   Counts: 70 packets input, 2338 bytes           67 packets output, 1936 bytes C10K# *Sep 20 21:40:09.983: Vi2.1 VPDN FS Tunnel to network: Fastswitching failed, punting pkt to process *Sep 20 21:40:09.983: Vi2.1 VPDN FS From tunnel: Punted 16 byte pak to ppp parse and iqueue C10K#sh caller user ParamPreet@cisco.com detailed   User: ParamPreet@cisco.com , line Vi2.1, service PPPoVPDN         Connected for 00:08:41, Idle for 00:05:40   Timeouts:     Limit      Remaining Timer Type                00:10:00   00:04:19   PPP idle   PPP: LCP Open, CHAP (<-), IPCP   LCP: -> peer, MRU, AuthProto, MagicNumber        <- peer, MagicNumber   NCP: Open IPCP   IPCP: <- peer, Address         -> peer, Address   IP: Local 20.20.20.1, remote 20.20.20.2   Counts: 120 packets input, 3138 bytes           117 packets output, 2736 bytes Disconnecting user session: *Sep 20 21:48:48.755: VPDN FS From tunnel: Received 130 byte pak *Sep 20 21:48:48.755: VPDN FS From tunnel: Pak consumed *Sep 20 21:48:48.755: Vi2.1 Tnl/Sn 64102/5 L2TP: Parse   AVP 0, len 8, flag 0x8000 (M) *Sep 20 21:48:48.755: Vi2.1 Tnl/Sn 64102/5 L2TP: Parse CDN *Sep 20 21:48:48.755: Vi2.1 Tnl/Sn 64102/5 L2TP: Parse   AVP 1, len 38, flag 0x8000 (M) *Sep 20 21:48:48.755: Vi2.1 Tnl/Sn 64102/5 L2TP: Result code(2): 2: Call disconnected, refer to error msg *Sep 20 21:48:48.755:       Error code(6): Vendor specific *Sep 20 21:48:48.755:       Optional msg: user-request/Call Disconnect *Sep 20 21:48:48.755: Vi2.1 Tnl/Sn 64102/5 L2TP: Parse   AVP 14, len 8, flag 0x8000 (M) *Sep 20 21:48:48.755: Vi2.1 Tnl/Sn 64102/5 L2TP: Assigned Call ID 44667 *Sep 20 21:48:48.755: Vi2.1 Tnl/Sn 64102/5 L2TP: Parse   AVP 46, len 11, flag 0x0 *Sep 20 21:48:48.755: Vi2.1 Tnl/Sn 64102/5 L2TP: disconnected, code 3, direction local for CP 0x0 *Sep 20 21:48:48.755: Vi2.1 Tnl/Sn 64102/5 L2TP: Parse Cisco AVP 104, len 11, flag 0x0 *Sep 20 21:48:48.755: Vi2.1 Tnl/Sn 64102/5 L2TP: PPP Disconnect Cause Code (Cisco) Already rcvd IETF version, ignoring *Sep 20 21:48:48.755: Vi2.1 Tnl/Sn 64102/5 L2TP: No missing AVPs in CDN *Sep 20 21:48:48.755: Vi2.1 Tnl/Sn 64102/5 L2TP: I CDN, flg TLS, ver 2, len 88, tnl 64102, cl 5, ns 15, nr 2 contiguous pak, size 88             C8 02 00 58 FA 66 00 05 00 0F 00 02 80 08 00 00             00 00 00 0E 80 26 00 00 00 01 00 02 00 06 75 73             65 72 2D 72 65 71 75 65 73 74 2F 43 61 6C 6C 20             44 69 73 63 6F 6E 6E 65 63 74 80 08 00 00 00 0E             AE 7B 00 0B 00 00 00 2E ... *Sep 20 21:48:48.755: Vi2.1 Tnl/Sn 64102/5 L2TP: O ZLB ctrl ack, flg TLS, ver 2, len 12, tnl 45050, cl 0, ns 2, nr 16             C8 02 00 0C AF FA 00 00 00 02 00 10 *Sep 20 21:48:48.755: Vi2.1 Tnl/Sn 64102/5 L2TP: I CDN from LAC tnl 45050, cl 44667 *Sep 20 21:48:48.755: Vi2.1 Tnl/Sn 64102/5 L2TP: disconnect (L2X) IETF: 18/host-request Ascend: 66/VPDN Local PPP Disconnect *Sep 20 21:48:48.755: Vi2.1 Tnl/Sn 64102/5 L2TP: Destroying session *Sep 20 21:48:48.755: Vi2.1 Tnl/Sn 64102/5 L2TP: Session state change from established to idle *Sep 20 21:48:48.755: Vi2.1 Tnl/Sn 64102/5 L2TP: Accounting stop sent *Sep 20 21:48:48.755: Vi2.1 Tnl/Sn 64102/5 L2TP: Unbinding session from idb *Sep 20 21:48:48.759: Vi2.1 VPDN: Resetting interface *Sep 20 21:48:48.759: Vi2.1 PPP: Block vaccess from being freed [0x19] *Sep 20 21:48:48.759:   Tnl 64102 L2TP: Tunnel state change from established to no-sessions-left *Sep 20 21:48:48.759:   Tnl 64102 L2TP: No more sessions in tunnel, shutdown (likely) in 10 seconds *Sep 20 21:48:49.151: Vi2.1 PPP: Missed link down notification *Sep 20 21:48:49.151: Vi2.1 PPP: Sending Acct Event[Down] id[9] *Sep 20 21:48:49.151: Vi2.1 IPCP: State is Closed *Sep 20 21:48:49.151: Vi2.1 PPP: Unlocked by [0x1] Still Locked by [0x18] *Sep 20 21:48:49.151: Vi2.1 PPP: Unlocked by [0x10] Still Locked by [0x8] *Sep 20 21:48:49.151: Vi2.1 PPP: Phase is TERMINATING *Sep 20 21:48:49.151: Vi2.1 LCP: State is Closed *Sep 20 21:48:49.151: Vi2.1 PPP: Phase is DOWN *Sep 20 21:48:49.151: Vi2.1 PPP: Send Message[Disconnect] *Sep 20 21:48:49.151: Vi2.1 PPP: Unlocked by [0x8] Still Locked by [0x0] C10K# *Sep 20 21:48:49.151: Vi2.1 PPP: Free previously blocked vaccess *Sep 20 21:48:49.151: Vi2.1 IPCP: Remove route to 20.20.20.2 C10K# *Sep 20 21:48:58.759:   Tnl 64102 L2TP: O StopCCN   to LAC tnlid 45050 *Sep 20 21:48:58.759:   Tnl 64102 L2TP: O StopCCN, flg TLS, ver 2, len 38, tnl 45050, cl 0, ns 2, nr 16             C8 02 00 26 AF FA 00 00 00 02 00 10 80 08 00 00             00 00 00 04 80 08 00 00 00 09 FA 66 80 0A 00 00             00 01 00 01 00 00 *Sep 20 21:48:58.759:   Tnl 64102 L2TP: Control channel retransmit delay set to 1 seconds *Sep 20 21:48:58.759:   Tnl 64102 L2TP: Tunnel state change from no-sessions-left to shutting-down *Sep 20 21:48:58.759: VPDN FS From tunnel: Received 60 byte pak C10K# *Sep 20 21:48:58.759: VPDN FS From tunnel: Pak consumed *Sep 20 21:48:59.759:   Tnl 64102 L2TP: Control channel retransmit delay set to 1 seconds C10K# *Sep 20 21:49:03.759:   Tnl 64102 L2TP: Shutdown tunnel *Sep 20 21:49:03.759:   Tnl 64102 L2TP: Tunnel state change from shutting-down to idle ... View more

Introduction: This document talks about the LAC configuration which terminated PPPoE connection from PPPoE client and based on the username i.e domain, it runnels the user via L2TP tunnel to LNS. For PPPoE client configuration, visit https://supportforums.cisco.com/docs/DOC-6050 In this setup, if any user comes in with cisco.com as a domain name as a part of the username ( for exa. ParamPreet@cisco.com) , it will be tunneled to LNS via L2TP. Users with username other than using cisco.com as a domain name will be terminated locally on this router as a LAC. Topology: ASR1006#sh ver Cisco IOS Software, IOS-XE Software (PPC_LIN UX_IOSD-ADVENTERPRISEK9-M), Version 12.2(33)XND, RELEASE SOFTWARE (fc2) <snip> ASR1006# ASR1006#sh run Building configuration... Current configuration : 4346 bytes ! version 12.2 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption service internal ! hostname ASR1006 ! boot-start-marker boot system bootflash:asr1000rp1-adventerprisek9.02.04.00.122-33.XND.bin boot-end-marker ! vrf definition AMTELECOM.COM rd 36125:101 ! vrf definition Mgmt-intf ! address-family ipv4 exit-address-family ! address-family ipv6 exit-address-family ! logging buffered 65535 enable secret 5 $1$nzyp$yRFDDr/LTY9qqfn.70C6f0 ! aaa new-model ! ! aaa group server radius CISCO-ACS-RADIUS server-private 172.16.156.61 auth-port 1645 acct-port 1646 key SECRET ! aaa group server radius AMTELECOM-ACS-RADIUS server-private 172.16.156.61 auth-port 1812 acct-port 1813 key SECRET ! !AAA configuration aaa authentication ppp CISCO-ACS-AUTH group CISCO-ACS-RADIUS aaa authentication ppp AMTELECOM-ACS-AUTH group AMTELECOM-ACS-RADIUS aaa authorization network AUTHORIZATION-PPP group CISCO-ACS-RADIUS aaa authorization subscriber-service default local ! ! ! ! ! aaa session-id common ip subnet-zero ip source-route no ip domain lookup ! ! ! ! service-policy type control L2-ACCESS !          multilink bundle-name authenticated vpdn enable ! vpdn-group LAC request-dialin   protocol l2tp   domain cisco.com ! This vpdn-group is configured to tunnel users with cisco.com as a domain name initiate-to ip 172.16.167.54 !Ip address of LNS source-ip 172.16.163.48 !Ip address to be used as a source for l2tp packets local name LAC !Local name to be used   for L2TP tunnel authetnication l2tp tunnel password 0 cisco ! !L2TP tunnel password ! username ASR1006 password 0 cisco username UBR10K-WIDE password 0 cisco username LNS password 0 cisco username LAC password 0 cisco ! redundancy mode none ! ! ! ! ! class-map type control match-any AMTELECOM-DOMAIN match unauthenticated-domain amtelecom.com match unauthenticated-domain amtelecom.net ! class-map type control match-all CISCO-DOMAIN match unauthenticated-domain cisco.com ! class-map type control match-all match_protocol_ppp match protocol ppp ! policy-map type service CISCO-SERVICE service vpdn group LAC ! policy-map type service AMTELECOM-SERVICE ! policy-map type control DOMAIN-BASED-ACCESS class type control CISCO-DOMAIN event session-start   1 authenticate aaa list CISCO-ACS-AUTH   2 service-policy type service name CISCO-SERVICE ! class type control AMTELECOM-DOMAIN event session-start   1 authenticate aaa list AMTELECOM-ACS-AUTH   2 authorize aaa list AUTHORIZATION-PPP identifier authenticated-username   3 service-policy type service name AMTELECOM-SERVICE ! ! policy-map type control L2-ACCESS class type control match_protocol_ppp event session-start   1 collect identifier unauthenticated-domain   2 service-policy type control DOMAIN-BASED-ACCESS ! ! policy-map type control amtelecom.com ! ! ! ! bba-group pppoe MAIN-BBA virtual-template 1 ! ! interface Loopback1 ip address 2.2.2.1 255.255.255.255 ! interface GigabitEthernet0/0/0 ip address 172.16.163.48 255.255.255.224 negotiation auto cdp enable ! interface GigabitEthernet0/0/1 no ip address negotiation auto cdp enable ! interface GigabitEthernet0/0/1.666 encapsulation dot1Q 666 ip address 10.1.1.1 255.255.255.0 pppoe enable group MAIN-BBA cdp enable ! interface GigabitEthernet0/0/2 no ip address shutdown negotiation auto cdp enable ! interface GigabitEthernet0/0/3 no ip address shutdown negotiation auto cdp enable ! interface ATM0/1/0 no ip address no atm enable-ilmi-trap ! interface GigabitEthernet0 vrf forwarding Mgmt-intf no ip address shutdown negotiation auto cdp enable ! interface Virtual-Template1 ! For local user termination which are not supposed to be tunneled. description amtelecom.net ADSL Subscribers mtu 800 ip unnumbered Loopback1 no ip proxy-arp peer default ip address pool PPPoE-POOL ppp authentication pap chap CISCO-ACS-AUTH ppp ipcp dns 67.58.192.10 67.58.192.11 ! interface Group-Async0 physical-layer async no ip address encapsulation slip ! ip local pool PPPoE-POOL 10.1.1.2 10.1.1.254 ip classless ip route 0.0.0.0 0.0.0.0 172.16.163.33 ! no ip http server no ip http secure-server ! ! ! radius-server attribute 8 include-in-access-req ! control-plane ! ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous stopbits 1 line aux 0 privilege level 15 password cisco stopbits 1 line vty 0 4 exec-timeout 60 0 privilege level 15 password cisco logging synchronous line vty 5 10 exec-timeout 60 0 privilege level 15 password cisco logging synchronous ! end The      client calls/connects the LAC (typically using PPPoE/ATM , modem or an      ISDN card). The      client and the LAC starts the PPP phase by negotiating the LCP options      (authentication method Password Authentication Protocol [PAP] or Challenge      Handshake Authentication Protocol [CHAP], PPP multilink, compression, and      so on). Let's      suppose that CHAP has been negotiated in step 2. The LAC sends a CHAP      challenge to the client. The      LAC gets a response (for instance username@DomainName and password). Based      on the domain name received in the CHAP response or the Dialed Number      Information Service (DNIS) received in the ISDN setup message, the LAC      checks whether the client is a VPDN/L2TP user. It does this by using its      local VPDN configuration or contacting an Authentication, Authorization,      and Accounting (AAA) server. Because      the client is a VPDN user, the LAC gets some information (from its local      VPDN configuration or from an AAA server) that it uses to bring up a      L2TP   tunnel with the LNS. The      LAC brings up a L2TP tunnel with the LNS. Based      on the name received in the request from the LAC, the LNS checks if the      LAC is allowed to open a tunnel (the LNS checks its local VPDN      configuration). Moreover, the LAC and the LNS authenticate each other      (they use their local database or contact an AAA server). The Tunnel is      then up between both devices. In this tunnel, several VPDN sessions can be      carried. For      the client username@DomainName, a VPDN session is triggered from the LAC      to the LNS. There is one VPDN session per client. The      LAC forwards the LCP options it has negotiated to the LNS with the client      along with the username@DomainName and password received from the client. The      LNS clones a virtual-access from a virtual-template specified in the VPDN      configuration. The LNS takes the LCP options received from the LAC and      authenticate the client locally or by contacting the AAA server. The      LNS sends a CHAP response to the client. The      IP Control Protocol (IPCP) phase is performed and then the route is      installed: the PPP session is up and running between the client and the      LNS. The LAC just forwards the PPP frames. The PPP frames are tunneled      between the LAC and the LNS. Tunnel setup messages along with user session setup messages that are being exchanged between LAC and LNS The LAC decides that a tunnel must be initiated from the LAC to the LNS. 1.      The LAC sends a Start-Control-Connection-Request (SCCRQ). A CHAP challenge and AV Pairs are included in this message. 2.      The LNS responds with a Start-Control-Connection-Reply (SCCRP). A CHAP challenge, the response to LAC's challenge and AV Pairs are included in this message. 3.      The LAC sends a Start-Control-Connection-Connected (SCCCN). The CHAP response is included in this message. 4.      The LNS responds with a Zero-Length Body Acknowledgement (ZLB ACK). That acknowledgement may be carried in another message. The tunnel is up. 5.      The LAC sends an Incoming-Call-Request (ICRQ) to the LNS. 6.      The LNS responds with an Incoming-Call-Reply (ICRP) message. 7.      The LAC sends an Incoming-Call-Connected (ICCN). 8.      The LNS responds back with a ZLB ACK. That acknowledgement may also be carried in another message. 9.      The session is up. Note: The messages above used for opening a tunnel or a session carry Attribute Value Pairs (AVPs) defined in RFC 2661. They describe properties and information (such as Bearercap, hostname, vendor name and window size). Some AV pairs are mandatory and others are optional. Note: A Tunnel ID is used to multiplex and demultiplex tunnels between the LAC and LNS. A session ID is used to identify a particular session with the tunnel. For L2F, the setup for tunneling a PPP session is the same as for L2TP. It involves: 1.      Establishing a tunnel between the NAS and the Home Gateway. This phase takes place only when there is no active tunnel between both devices. 2.      Establishing a session between the NAS and the Home Gateway. ASR1006-1#sh debug General OS:   AAA Authentication debugging is on   AAA Authorization debugging is on PPP:   PPP authentication debugging is on   PPP authorization debugging is on   PPP protocol negotiation debugging is on PPPoE:   PPPoE protocol events debugging is on   PPPoE control packets debugging is on   PPPoE protocol errors debugging is on VPN:   L2TP/PPTP protocol events debugging is on   L2TP/PPTP data packet debugging is on   L2TP/PPTP control packet debugging is on   L2TP/PPTP protocol errors debugging is on RADIUS: Radius protocol debugging is on Radius protocol brief debugging is off Radius protocol verbose debugging is off Radius packet hex dump debugging is off Radius packet protocol debugging is on Radius packet retransmission debugging is off Radius server fail-over debugging is off Radius elog debugging is off ASR1006# *Sep 21 14:09:44.668: PPPoE 0: I PADI   R:001b.d4ee.63c1 L:ffff.ffff.ffff 666 Gi0/0/1.666 contiguous pak, size 36             FF FF FF FF FF FF 00 1B D4 EE 63 C1 81 00 02 9A             88 63 11 09 00 00 00 0C 01 01 00 00 01 03 00 04             48 3A 81 9C *Sep 21 14:09:44.668:   Service tag: NULL Tag *Sep 21 14:09:44.668: PPPoE 0: O PADO, R:0024.14ab.d701 L:001b.d4ee.63c1 666 Gi0/0/1.666 *Sep 21 14:09:44.668:   Service tag: NULL Tag contiguous pak, size 74             00 1B D4 EE 63 C1 00 24 14 AB D7 01 81 00 02 9A             88 63 11 07 00 00 00 32 01 01 00 00 01 03 00 04             48 3A 81 9C 01 02 00 0E 42 41 52 49 2D 41 53 52             31 30 30 36 2D 31 01 04 00 10 B5 A6 9C 64 34 D8             E3 56 66 10 B5 3F 2D A5 ... ASR1006# *Sep 21 14:09:46.624: PPPoE 0: I PADR   R:001b.d4ee.63c1 L:0024.14ab.d701 666 Gi0/0/1.666 contiguous pak, size 74             00 24 14 AB D7 01 00 1B D4 EE 63 C1 81 00 02 9A             88 63 11 19 00 00 00 32 01 01 00 00 01 03 00 04             48 3A 81 9C 01 02 00 0E 42 41 52 49 2D 41 53 52             31 30 30 36 2D 31 01 04 00 10 B5 A6 9C 64 34 D8             E3 56 66 10 B5 3F 2D A5 ... *Sep 21 14:09:46.624:   Service tag: NULL Tag *Sep 21 14:09:46.624: PPPoE : encap string prepared *Sep 21 14:09:46.624: [26]PPPoE 26: Access IE handle allocated *Sep 21 14:09:46.624: [26]PPPoE 26: AAA get retrieved attrs *Sep 21 14:09:46.624: [26]PPPoE 26: AAA get nas port details *Sep 21 14:09:46.624: AAA/BIND(0000002A): Bind i/f Virtual-Template1 *Sep 21 14:09:46.624: [26]PPPoE 26: AAA get dynamic attrs *Sep 21 14:09:46.624: [26]PPPoE 26: AAA unique ID allocated *Sep 21 14:09:46.624: [26]PPPoE 26: No AAA accounting method list *Sep 21 14:09:46.624: [26]PPPoE 26: Service request sent to SSS *Sep 21 14:09:46.625: [26]PPPoE 26: Created, Service: None R:0024.14ab.d701 L:001b.d4ee.63c1 666 Gi0/0/1.666 *Sep 21 14:09:46.626: [26]PPPoE 26: State NAS_PORT_POLICY_INQUIRY     Event SSS MORE KEYS *Sep 21 14:09:46.626: PPP: Alloc Context [34846A2C] *Sep 21 14:09:46.626: ppp26 PPP: Phase is ESTABLISHING *Sep 21 14:09:46.626: ppp26 PPP: Using AAA Unique Id = 2A *Sep 21 14:09:46.626: [26]PPPoE 26: data path set to PPP *Sep 21 14:09:46.626: [26]PPPoE 26: Segement (SSS class): PROVISION *Sep 21 14:09:46.626: [26]PPPoE 26: State PROVISION_PPP     Event SSM PROVISIONED *Sep 21 14:09:46.627: [26]PPPoE 26: O PADS   R:001b.d4ee.63c1 L:0024.14ab.d701 Gi0/0/1.666 contiguous pak, size 74             00 1B D4 EE 63 C1 00 24 14 AB D7 01 81 00 02 9A             88 63 11 65 00 1A 00 32 01 01 00 00 01 03 00 04             48 3A 81 9C 01 02 00 0E 42 41 52 49 2D 41 53 52             31 30 30 36 2D 31 01 04 00 10 B5 A6 9C 64 34 D8             E3 56 66 10 B5 3F 2D A5 ... *Sep 21 14:09:46.627: [26]PPPoE 26: Failed to Add ANCP Line attributes to the PPPoE Authen attributes *Sep 21 14:09:46.627: AAA/AUTHOR (0000002A): Method list id=0 not configured. Skip author *Sep 21 14:09:46.627: ppp26 PPP: Authorization NOT required *Sep 21 14:09:46.627: ppp26 PPP: Using vpn set call direction *Sep 21 14:09:46.627: ppp26 PPP: Treating connection as a callin *Sep 21 14:09:46.627: ppp26 PPP: Session handle[FF00001A] Session id[26] *Sep 21 14:09:46.627: ppp26 LCP: Event[OPEN] State[Initial to Starting] *Sep 21 14:09:46.627: ppp26 PPP LCP: Enter passive mode, state[Stopped] *Sep 21 14:09:46.630: ppp26 LCP: I CONFREQ [Stopped] id 1 len 10 *Sep 21 14:09:46.630: ppp26 LCP:     MagicNumber 0x1D104E53 (0x05061D104E53) *Sep 21 14:09:46.630: ppp26 LCP: O CONFREQ [Stopped] id 1 len 18 *Sep 21 14:09:46.630: ppp26 LCP:     MRU 800 (0x01040320) *Sep 21 14:09:46.630: ppp26 LCP:     Aut ASR1006#hProto PAP (0x0304C023) *Sep 21 14:09:46.630: ppp26 LCP:     MagicNumber 0x2552192B (0x05062552192B) *Sep 21 14:09:46.630: ppp26 LCP: O CONFACK [Stopped] id 1 len 10 *Sep 21 14:09:46.630: ppp26 LCP:     MagicNumber 0x1D104E53 (0x05061D104E53) *Sep 21 14:09:46.630: ppp26 LCP: Event[Receive ConfReq+] State[Stopped to ACKsent] *Sep 21 14:09:46.631: ppp26 LCP: I CONFNAK [ACKsent] id 1 len 13 *Sep 21 14:09:46.631: ppp26 LCP:     MRU 1500 (0x010405DC) *Sep 21 14:09:46.631: ppp26 LCP:     AuthProto CHAP (0x0305C22305) *Sep 21 14:09:46.631: ppp26 LCP: O CONFREQ [ACKsent] id 2 len 19 *Sep 21 14:09:46.631: ppp26 LCP:     MRU 1500 (0x010405DC) *Sep 21 14:09:46.631: ppp26 LCP:     AuthProto CHAP (0x0305C22305) *Sep 21 14:09:46.631: ppp26 LCP:     MagicNumber 0x2552192B (0x05062552192B) *Sep 21 14:09:46.631: ppp26 LCP: Event[Receive ConfNak/Rej] State[ACKsent to ACKsent] *Sep 21 14:09:46.633: ppp26 LCP: I CONFACK [ACKsent] id 2 len 19 *Sep 21 14:09:46.633: ppp26 LCP:     MRU 1500 (0x010405DC) *Sep 21 14:09:46.633: ppp26 LCP:     AuthProto CHAP (0x0305C22305) *Sep 21 14:09:46.633: ppp26 LCP:     MagicNumber 0x2552192B (0x05062552192B) *Sep 21 14:09:46.633: ppp26 LCP: Event[Receive ConfAck] State[ACKsent to Open] *Sep 21 14:09:46.659: ppp26 PPP: Phase is AUTHENTICATING, by this end *Sep 21 14:09:46.659: ppp26 CHAP: O CHALLENGE id 1 len 35 from "ASR1006" *Sep 21 14:09:46.659: ppp26 LCP: State is Open *Sep 21 14:09:46.661: ppp26 CHAP: I RESPONSE id 1 len 36 from ParamPreet@cisco.com ! username with cisco.com as a domain name is received *Sep 21 14:09:46.661: ppp26 PPP: Phase is FORWARDING, Attempting Forward *Sep 21 14:09:46.663: ppp26 PPP: Phase is AUTHENTICATING, Unauthenticated User *Sep 21 14:09:46.663: AAA/AUTHEN/PPP (0000002A): Pick method list 'CISCO-ACS-AUTH' *Sep 21 14:09:46.663: ppp26 PPP: Sent CHAP LOGIN Request *Sep 21 14:09:46.663: RADIUS/ENCODE(0000002A):Orig. component type = PPoE *Sep 21 14:09:46.663: RADIUS:   AAA Unsupported Attr: interface          [201] 9    *Sep 21 14:09:46.663: RADIUS:    30 2F 30 2F 31 2F 36            [ 0/0/1/6] *Sep 21 14:09:46.663: RADIUS:   AAA Unsupported Attr: client-mac-address[44]   14   *Sep 21 14:09:46.663: RADIUS:    30 30 31 62 2E 64 34 65 65 2E 36 33       [ 001b.d4ee.63] *Sep 21 14:09:46.663: RADIUS(0000002A): Config NAS IP: 0.0.0.0 *Sep 21 14:09:46.663: RADIUS/ENCODE: No idb found! Framed IP Addr might not be included *Sep 21 14:09:46.663: RADIUS/ENCODE(0000002A): acct_session_id: 32 *Sep 21 14:09:46.663: RADIUS(0000002A): sending *Sep 21 14:09:46.663: RADIUS/ENCODE: Best Local IP-Address 172.16.163.48 for Radius-Server 172.16.156.61 *Sep 21 14:09:46.663: RADIUS(0000002A): Send Access-Request to 172.16.156.61:1645 id 1645/28, len 97 *Sep 21 14:09:46.663: RADIUS:   authenticator 51 2E 93 02 2B EA F0 2D - C9 B8 D2 42 D1 39 F2 3B *Sep 21 14:09:46.663: RADIUS:   Framed-Protocol      [7]    6    PPP                        [1] *Sep 21 14:09:46.663: RADIUS:   User-Name            [1]    17   " ParamPreet@cisco.com " *Sep 21 14:09:46.663: RADIUS:   CHAP-Password        [3]    19   * *Sep 21 14:09:46.663: RADIUS:   NAS-Port-Type       [61]   6    Virtual                    [5] *Sep 21 14:09:46.663: RADIUS:   NAS-Port             [5]    6    0                          *Sep 21 14:09:46.663: RADIUS:   NAS-Port-Id          [87]   11   "0/0/1/666" *Sep 21 14:09:46.664: RADIUS:   Service-Type         [6]    6    Framed                     [2] *Sep 21 14:09:46.664: RADIUS:   NAS-IP-Address       [4]    6    172.16.163.48              *Sep 21 14:09:46.670: RADIUS: Received from id 1645/28 172.16.156.61:1645, Access-Accept, len 52 *Sep 21 14:09:46.670: RADIUS:   authenticator CE D3 60 8A 67 B8 48 5B - 32 79 2A 5F 66 F2 3D E1 *Sep 21 14:09:46.670: RADIUS:   Framed-IP-Address    [8]    6    2.2.2.4                    *Sep 21 14:09:46.670: RADIUS:   Class                [25]   26   *Sep 21 14:09:46.670: RADIUS:    43 41 43 53 3A 30 2F 31 32 34 37 61 62 2F 61 63   [CACS:0/1247ab/ac] *Sep 21 14:09:46.670: RADIUS:    31 30 61 33 33 30 2F 30           [ 10a330/0] *Sep 21 14:09:46.671: RADIUS(0000002A): Received from id 1645/28 *Sep 21 14:09:46.671: ppp26 PPP: Received LOGIN Response PASS *Sep 21 14:09:46.671: ppp26 PPP AUTHOR: Author Data NOT Available *Sep 21 14:09:46.671: ppp26 PPP: Phase is FORWARDING, Attempting Forward *Sep 21 14:09:46.672: AAA/AUTHOR (0x2A): Pick method list 'default' *Sep 21 14:09:46.673: ppp26 PPP: Receive Attrs from[SSS] Keep[NCPs] MERGE *Sep 21 14:09:46.673: ppp26 PPP: Skip Attr: username              "CISCO-SERVICE" *Se ASR1006#p 21 14:09:46.673: ppp26 PPP: Skip Attr: password              <hidden> *Sep 21 14:09:46.673: ppp26 PPP: Skip Attr: ip-addresses          "172.16.167.54" *Sep 21 14:09:46.673: ppp26 PPP: Skip Attr: ip-address-limits     "65535 " *Sep 21 14:09:46.673: ppp26 PPP: Skip Attr: tunnel-type           2 [l2tp] *Sep 21 14:09:46.673: ppp26 PPP: Skip Attr: sss-service           1 [vpdn] *Sep 21 14:09:46.673: ppp26 PPP: Skip Attr: vpdn-group            "LAC" *Sep 21 14:09:46.673: ppp26 PPP: Skip Attr: tunnel-medium-type    1 [IPv4] *Sep 21 14:09:46.673: ppp26 PPP: Skip Attr: tunnel-id             "LAC" *Sep 21 14:09:46.673: ppp26 PPP: Skip Attr: vpdn-group            "LAC" *Sep 21 14:09:46.673: ppp26 PPP: Skip Attr: source-ip             172.16.163.48 *Sep 21 14:09:46.673: ppp26 PPP: Skip Attr: l2tp-tunnel-authen    "yes" *Sep 21 14:09:46.673: ppp26 PPP: Skip Attr: l2tp-tunnel-password <hidden> *Sep 21 14:09:46.673: ppp26 PPP: Skip Attr: l2tp-silent-switchov 1 (0x1) *Sep 21 14:09:46.674: [26]PPPoE 26: Access IE nas port called *Sep 21 14:09:46.674: L2TUN APP: uid:26/handle/4118Peer AIE:2B00001A Peer-peer 00000000 Ours 00000000 ! L2TP tunnel needs to be built for the user with domain name cisco.com *Sep 21 14:09:46.674: L2TUN APP: uid:26/handle/4118New peer; get switch hdl 4121 *Sep 21 14:09:46.674: L2X         _____:________: class [VPDN group LAC ip addr 172.16.167.54 client LAC] *Sep 21 14:09:46.674: L2X         _____:________:    created *Sep 21 14:09:46.674: L2X         _____:________: class [VPDN group LAC ip addr 172.16.167.54 client LAC] *Sep 21 14:09:46.674: L2X         _____:________:    App locked 0->1 *Sep 21 14:09:46.674: L2X   _____:_____:________: Create logical session *Sep 21 14:09:46.674: L2TP _____:_____:________: Create session *Sep 21 14:09:46.674: L2TP _____:_____:________:    App type set to VPDN *Sep 21 14:09:46.674: L2TP 0001A:_____:________:    UDP checksum ignore is enabled *Sep 21 14:09:46.674: L2TP 0001A:_____:________:    Sequencing default tx disabled *Sep 21 14:09:46.674: L2TP 0001A:_____:________:    Sequencing default rx disabled *Sep 21 14:09:46.675: L2TP 0001A:_____:________:    Framing set to sync *Sep 21 14:09:46.675: L2TP 0001A:_____:________:    Bearer set to none *Sep 21 14:09:46.675: L2TP 0001A:_____:________: Set HA epoch to 0 *Sep 21 14:09:46.675: L2TP 0001A:_____:________:    L2TPoUDP session needed between *Sep 21 14:09:46.675: L2TP 0001A:_____:________:      172.16.163.48:0<->172.16.167.54:0 *Sep 21 14:09:46.675: L2TP 0001A:_____:________:    Using ICRQ FSM *Sep 21 14:09:46.675: L2TP 0001A:_____:________: FSM-Sn ev created *Sep 21 14:09:46.675: L2TP 0001A:_____:________: FSM-Sn     Init->Idle *Sep 21 14:09:46.675: L2TP 0001A:_____:________: FSM-Sn do none *Sep 21 14:09:46.675: L2TP 0001A:_____:________:      remote ip set to 172.16.167.54 *Sep 21 14:09:46.675: L2TP 0001A:_____:________:      local ip set to 172.16.163.48 ! Tunnel endpoints was determined *Sep 21 14:09:46.675: L2TP 0001A:_____:________: no cookies enabled *Sep 21 14:09:46.675: L2TP 0001A:_____:________: FSM-Sn ev App-Conn *Sep 21 14:09:46.675: L2TP 0001A:_____:________: FSM-Sn     Idle->Wt-CC *Sep 21 14:09:46.675: L2TP 0001A:_____:________: FSM-Sn do App-Connect *Sep 21 14:09:46.675: L2TP 0001A:_____:________: Find or create cc for session *Sep 21 14:09:46.675: L2TP        _____:________: Find cc between *Sep 21 14:09:46.675: L2TP        _____:________:    172.16.163.48<->172.16.167.54 *Sep 21 14:09:46.675: L2TP        _____:________:    with class: VPDN group LAC ip addr 172.16.167.54 client LAC *Sep 21 14:09:46.675: L2TP        _____:________:    and group:   " *Sep 21 14:09:46.675: L2TP        _____:________:    and group:   "VPDN group LAC ip addr 172.16.167.54 client LAC..." *Sep 21 14:09:46.675: L2TP        _____:________:    and IP proto: L2TPoUDP *Sep 21 14:09:46.675: L2TP        _____:________:    and framing type: sync *Sep 21 14:09:46.675: L2TP        _____:________:    and bearer type: none *Sep 21 14:09:46.675: L2TP        _____:________:    and version: V2 *Sep 21 14:09:46.675: L2TP        _____:________:    and local hostname: LAC *Sep 21 14:09:46.675: L2TP        _____:________: Need to instigate control channel *Sep 21 14:09:46.675: L2X   tnl    08016:________: Create logical tunnel *Sep 21 14:09:46.675: L2TP tnl    08016:________: Create tunnel *Sep 21 14:09:46.675: L2TP tnl    08016:________:      version set to V2[1] *Sep 21 14:09:46.675: L2TP tnl    08016:________:      remote ip set to 172.16.167.54 *Sep 21 14:09:46.675: L2TP tnl    08016:________:      local ip set to 172.16.163.48 *Sep 21 14:09:46.675: L2X         _____:________: class [VPDN group LAC ip addr 172.16.167.54 client LAC] *Sep 21 14:09:46.675: L2X         _____:________:    Protocol locked 0->1 *Sep 21 14:09:46.675: L2TP tnl    08016:00008C1E:      class name VPDN group LAC ip addr 172.16.167.54 client LAC *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E:      group set to " *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E:      group set to "VPDN group LAC ip addr 172.16.167.54 client LAC..." *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E: FSM-CC ev Session-Conn *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E: FSM-CC     Idle->Wt-Sock *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E: FSM-CC do Session-Conn-Sock *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E:    Session count now 1 *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E:    VPDN Session count now 1 *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E: Open sock 172.16.163.48:1701->172.16.167.54:1701 *Sep 21 14:09:46.676: L2TP tnl   08016:00008C1E: FSM-CC ev Sock-Ready *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E: FSM-CC     Wt-Sock->Wt-SCCRP *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E: FSM-CC do Tx-SCCRQ ! LAC is ready to send SCCRQ   to create a tunnel with tunnel authenticaiton *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E:   *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E: Tx SCCRQ to 172.16.167.54 *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E:      adjust receiving window size for HA *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E:   IETF v2: *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E:    Protocol Version   1, Revision 0 *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E:    Framing Cap        none(0x0) *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E:    Firmware Ver       0x1130 *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E:    Hostname            " *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E:    Hostname            "LAC" *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E:    Vendor Name        *Sep 21 14:09:46.676: L2TP tnl   08016:00008C1E:       " *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E:       "Cisco Systems, Inc." *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E:    Assigned Tunnel I 0x00008C1E (35870) *Sep 21 14:09:46.676: L2TP tnl    08016:00008C1E:    Recv Window Size 1024 *Sep 21 14:09:46.677: L2TP tnl    08016:00008C1E:    Challenge          [16] *Sep 21 14:09:46.677: L2TP tnl    08016:00008C1E:      0x82074AF8B231A90583D6FCF36CD7A667 *Sep 21 14:09:46.677: L2TP tnl    08016:00008C1E:    PPPoE Relay Forward Capable Cisco v2: *Sep 21 14:09:46.677: L2TP tnl    08016:00008C1E:   *Sep 21 14:09:46.677: L2TP tnl    08016:00008C1E: O SCCRQ 0/0 ns/nr 0/0. cur/max resendQ sz 0/4 *Sep 21 14:09:46.677: L2TP tnl    08016:00008C1E: Tx SCCRQ, flg TLS, ver 2, len 142 *Sep 21 14:09:46.677: L2TP tnl    08016:00008C1E:    tnl 0, ns 0, nr 0 *Sep 21 14:09:46.677: contiguous pak, size 142             C8 02 00 8E 00 00 00 00 00 00 00 00 80 08 00 00             00 00 00 01 80 08 00 00 00 02 01 00 80 0A 00 00             00 03 00 00 00 00 00 08 00 00 00 06 11 30 80 09             00 00 00 07 4C 41 43 00 19 00 00 00 08 43 69 73             63 6F 20 53 79 73 74 65 6D 73 2C 20 49 6E 63 2E             80 08 00 00 00 09 8C 1E 80 08 00 00 00 0A 04 00             80 16 00 00 00 0B 82 07 4A F8 B2 31 A9 05 83 D6             FC F3 6C D7 A6 67 00 06 00 00 00 38 00 06 00 00             00 39 00 06 00 09 00 6E 00 06 00 09 00 6F *Sep 21 14:09:46.677: L2TP 0001A:08016:00002A05: Session attached *Sep 21 14:09:46.677: L2TP 0001A:08016:00002A05: FSM-Sn ev DP-Setup *Sep 21 14:09:46.677: L2TP 0001A:08016:00002A05: FSM-Sn     in Wt-CC *Sep 21 14:09:46.677: L2TP 0001A:08016:00002A05: FSM-Sn do Ignore-DP-Setup *Sep 21 14:09:46.677: [26]PPPoE 26: State LCP_NEGOTIATION     Event PPP FORWARDING *Sep 21 14:09:46.678: [26]PPPoE 26: Segement (SSS class): UPDATED *Sep 21 14:09:46.678: [26]PPPoE 26: SSS switch updated *Sep 21 14:09:47.676: L2X:Punting to L2TP control message queue *Sep 21 14:09:47.677: L2TP tnl    08016:00008C1E: Drain unsentQ, cur/max resendQ sz 0/4, unsentQ 0 *Sep 21 14:09:47.677: L2TP tnl    08016:00008C1E: L2TP: Parse IETF AVP 2, len 8, flag 0x8000 (M) *Sep 21 14:09:47.677: L2TP tnl    08016:00008C1E: L2TP: Parse IETF AVP 3, len 10, flag 0x8000 (M) *Sep 21 14:09:47.677: L2TP tnl    08016:00008C1E: L2TP: Parse IETF AVP 4, len 10, flag 0x8000 (M) *Sep 21 14:09:47.677: L2TP tnl    08016:00008C1E: L2TP: Parse IETF AVP 6, len 8, flag 0x0 *Sep 21 14:09:47.677: L2TP tnl    08016:00008C1E: L2TP: Parse IETF AVP 7, len 9, flag 0x8000 (M) *Sep 21 14:09:47.677: L2TP tnl    08016:00008C1E: L2TP: Parse IET ASR1006#F AVP 8, len 25, flag 0x0 *Sep 21 14:09:47.677: L2TP tnl   08016:00008C1E: L2TP: Parse IETF AVP 9, len 8, flag 0x8000 (M) *Sep 21 14:09:47.677: L2TP tnl    08016:00008C1E: L2TP: Parse IETF AVP 10, len 8, flag 0x8000 (M) *Sep 21 14:09:47.677: L2TP tnl    08016:00008C1E: L2TP: Parse IETF AVP 11, len 22, flag 0x8000 (M) *Sep 21 14:09:47.677: L2TP tnl    08016:00008C1E: L2TP: Parse IETF AVP 13, len 22, flag 0x8000 (M) *Sep 21 14:09:47.677: L2TP tnl    08016:00008C1E: No missing AVPs in SCCRP *Sep 21 14:09:47.677: L2TP tnl    08016:00008C1E:   *Sep 21 14:09:47.677: L2TP tnl    08016:00008C1E: Rx SCCRP, flg TLS, ver 2, len 150 *Sep 21 14:09:47.677: L2TP tnl    08016:00008C1E:    tnl 35870, ns 0, nr 1 *Sep 21 14:09:47.677: L2TP tnl    08016:00008C1E:   IETF v2: *Sep 21 14:09:47.677: L2TP tnl    08016:00008C1E:    Protocol Version   1, Revision 0 *Sep 21 14:09:47.677: L2TP tnl    08016:00008C1E:    Framing Cap        none(0x0) *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E:    Bearer Cap         none(0x0) *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E:    Firmware Ver       0x1120 *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E:    Hostname            " *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E:    Hostname            "LNS" *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E:    Vendor Name        *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E:       " *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E:       "Cisco Systems, Inc." *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E:    Assigned Tunnel I 0x00005630 (22064) *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E:    Recv Window Size   5000 *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E:    Challenge          [16] *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E:      0xFEEE5BE8CF5D1A17CA58A93DD69D2CA6 *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E:    Challenge Resp     [16] *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E:      0xB113C8371CCD6770287DF21E76CA44FB *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E:   *Sep 21 14:09:47.678: contiguous pak, size 150             C8 02 00 96 8C 1E 00 00 00 00 00 01 80 08 00 00             00 00 00 02 80 08 00 00 00 02 01 00 80 0A 00 00             00 03 00 00 00 00 80 0A 00 00 00 04 00 00 00 00             00 08 00 00 00 06 11 20 80 09 00 00 00 07 4C 4E             53 00 19 00 00 00 08 43 69 73 63 6F 20 53 79 73             74 65 6D 73 2C 20 49 6E 63 2E 80 08 00 00 00 09             56 30 80 08 00 00 00 0A 13 88 80 16 00 00 00 0B             FE EE 5B E8 CF 5D 1A 17 CA 58 A9 3D D6 9D 2C A6             80 16 00 00 00 0D B1 13 C8 37 1C CD 67 70 28 7D             F2 1E 76 CA 44 FB *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E: I SCCRP from LNS *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E: FSM-CC ev Rx-SCCRP *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E: FSM-CC     Wt-SCCRP->Proc-SCCRP *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E: FSM-CC do Rx-SCCRP *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E: Got a challenge in SCCRP from LNS *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E: Got a response in SCCRP from LNS *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E: Tunnel Authentication success *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E: Auth glob Challenge/Response AVP Passed, 5 *Sep 21 14:09:47.678: L2TP tnl    08016:00008C1E: Auth glob Overall Ignored, 11 *Sep 21 14:09:47.679: L2TP tnl    08016:00008C1E: FSM-CC ev SCCRP-OK *Sep 21 14:09:47.679: L2TP tnl    08016:00008C1E: FSM-CC     Proc-SCCRP->established *Sep 21 14:09:47.679: L2TP tnl    08016:00008C1E: FSM-CC do Tx-SCCCN *Sep 21 14:09:47.679: L2TP tnl    08016:00008C1E:   *Sep 21 14:09:47.679: L2TP tnl    08016:00008C1E: Tx SCCCN to LNS tnl 22064 *Sep 21 14:09:47.679: L2TP tnl    08016:00008C1E:   IETF v2: *Sep 21 14:09:47.679: L2TP tnl    08016:00008C1E:    Challenge Resp     [16] *Sep 21 14:09:47.679: L2TP tnl    08016:00008C1E:      0x202F8BFDA4EE702E8010961ED40FFD67 *Sep 21 14:09:47.679: L2TP tnl    08016:00008C1E:   *Sep 21 14:09:47.679: L2TP tnl    08016:00008C1E: O SCCCN 22064/0 ns/nr 1/1. cur/max resendQ sz 0/10 *Sep 21 14:09:47.679: L2TP tnl    08016:00008C1E: Tx SCCCN, flg TLS, ver 2, len 42 *Sep 21 14:09:47.679: L2TP tnl    08016:00008C1E:    tnl 22064, ns 1, nr 1 *Sep 21 14:09:47.679: contiguous pak, size 42             C8 02 00 2A 56 30 00 00 00 01 00 01 80 08 00 00             00 00 00 03 80 16 00 00 00 0D 20 2F 8B FD A4 EE             70 2E 80 10 96 1E D4 0F FD 67 *Sep 21 14:09:47.679: L2TP tnl    08016:00008C1E: Tunnel accounting send not possible - no id *Sep 21 14:09:47.679: L2TP tnl    08016:00008C1E: Control channel up *Sep 21 14:09:47.679: L2TP tnl    08016:00008C1E:    172.16.163.48<->172.16.167.54 *Sep 21 14:09:47.679: L2TP 0001A:08016:00002A05: FSM-Sn ev CC-Up *Sep 21 14:09:47.679: L2TP 0001A:08016:00002A05: FSM-Sn     Wt-CC->Wt-Sock *Sep 21 14:09:47.679: L2TP 0001A:08016:00002A05: FSM-Sn do CC-Up *Sep 21 14:09:47.679: L2TP 0001A:08016:00002A05:    Session needs to have: *Sep 21 14:09:47.679: L2TP 0001A:08016:00002A05:      V2 PPTP *Sep 21 14:09:47.679: L2TP 0001A:08016:00002A05:    Peer cc can do: *Sep 21 14:09:47.679: L2TP 0001A:08016:00002A05:      V2 *Sep 21 14:09:47.679: L2TP 0001A:08016:00002A05: Open sock 172.16.163.48:1701->172.16.167.54:1701 *Sep 21 14:09:47.680: L2TP 0001A:08016:00002A05: FSM-Sn ev Sock-Ready ! Tunnel setup is finished and now user session needs to be transmitted to LNS *Sep 21 14:09:47.680: L2TP 0001A:08016:00002A05: FSM-Sn     Wt-Sock->Wt-Tx-ICRQ *Sep 21 14:09:47.680: L2TP 0001A:08016:00002A05: FSM-Sn do Tx-ICRQ-Local-Check *Sep 21 14:09:47.680: L2TP 0001A:08016:00002A05: FSM-Sn ev Local-Cont *Sep 21 14:09:47.680: L2TP 0001A:08016:00002A05: FSM-Sn     Wt-Tx-ICRQ->Wt-Rx-ICRP *Sep 21 14:09:47.680: L2TP 0001A:08016:00002A05: FSM-Sn do Tx-ICRQ *Sep 21 14:09:47.680: L2TP 0001A:08016:00002A05:   *Sep 21 14:09:47.680: L2TP 0001A:08016:00002A05: Tx ICRQ to LNS 22064/0 *Sep 21 14:09:47.680: L2TP 0001A:08016:00002A05:   IETF v2: *Sep 21 14:09:47.680: L2TP 0001A:08016:00002A05:    Assigned Call ID   0x00002A05 (10757) *Sep 21 14:09:47.680: L2TP 0001A:08016:00002A05:    Serial Number      3057500006 *Sep 21 14:09:47.680: L2TP 0001A:08016:00002A05:    Bearer Type        none(0) *Sep 21 14:09:47.680: L2TP 0001A:08016:00002A05:   Cisco v2: *Sep 21 14:09:47.680: L2TP 0001A:08016:00002A05:    Client NAS Port    [9] *Sep 21 14:09:47.680: L2TP 0001A:08016:00002A05:      ""<0F><10><09><02><03><01><00><02><9A>" *Sep 21 14:09:47.680: L2TP 0001A:08016:00002A05:   *Sep 21 14:09:47.680: L2TP 0001A:08016:00002A05: O ICRQ 22064/0 ns/nr 2/1. cur/max resendQ sz 1/10 *Sep 21 14:09:47.681: L2TP 0001A:08016:00002A05: Tx ICRQ, flg TLS, ver 2, len 63 *Sep 21 14:09:47.681: L2TP 0001A:08016:00002A05:    tnl 22064, lsid 10757, rsid 0, ns 2, nr 1 *Sep 21 14:09:47.681: contiguous pak, size 63             C8 02 00 3F 56 30 00 00 00 02 00 01 80 08 00 00             00 00 00 0A 80 08 00 00 00 0E 2A 05 80 0A 00 00             00 0F B6 3D BF 66 80 0A 00 00 00 12 00 00 00 00             00 0F 00 09 00 64 0F 10 09 02 03 01 00 02 9A *Sep 21 14:09:47.681: L2TP tnl    08016:00008C1E: Drain unsentQ, cur/max resendQ sz 1/10, unsentQ 0 *Sep 21 14:09:47.681: L2TP tnl    08016:00008C1E:   *Sep 21 14:09:47.681: L2TP tnl    08016:00008C1E: Rx ZLB ACK, flg TLS, ver 2, len 12 *Sep 21 14:09:47.681: L2TP tnl    08016:00008C1E:    tnl 35870, ns 1, nr 2 *Sep 21 14:09:47.681: L2TP tnl    08016:00008C1E:   *Sep 21 14:09:47.681: contiguous pak, size 12             C8 02 00 0C 8C 1E 00 00 00 01 00 02 *Sep 21 14:09:47.681: L2X:Punting to L2TP control message queue *Sep 21 14:09:47.681: L2TP tnl    08016:00008C1E: ICRP: Perform early message digest validation *Sep 21 14:09:47.681: L2TP tnl    08016:00008C1E: Auth glob Overall Ignored, 12 *Sep 21 14:09:47.681: L2TP tnl    08016:00008C1E: Drain unsentQ, cur/max resendQ sz 0/10, unsentQ 0 *Sep 21 14:09:47.681: L2TP 0001A:08016:00002A05: L2TP: Parse IETF AVP 14, len 8, flag 0x8000 (M) *Sep 21 14:09:47.682: L2TP tnl    08016:00008C1E: No missing AVPs in ICRP *Sep 21 14:09:47.682: L2TP tnl    08016:00008C1E:   *Sep 21 14:09:47.682: L2TP 0001A:08016:00002A05: Rx ICRP, flg TLS, ver 2, len 28 *Sep 21 14:09:47.682: L2TP 0001A:08016:00002A05:    tnl 35870, lsid 10757, rsid 0, ns 1, nr 3 *Sep 21 14:09:47.682: L2TP 0001A:08016:00002A05:   IETF v2: *Sep 21 14:09:47.682: L2TP 0001A:08016:00002A05:    Assigned Call ID   0x00000002 (2) *Sep 21 14:09:47.682: L2TP 0001A:08016:00002A05:   *Sep 21 14:09:47.682: contiguous pak, size 28             C8 02 00 1C 8C 1E 2A 05 00 01 00 03 80 08 00 00             00 00 00 0B 80 08 00 00 00 0E 00 02 *Sep 21 14:09:47.682: L2TP 0001A:08016:00002A05: FSM-Sn ev Rx-ICRP *Sep 21 14:09:47.682: L2TP 0001A:08016:00002A05: FSM-Sn     Wt-Rx-ICRP->Proc-ICRP *Sep 21 14:09:47.682: L2TP 0001A:08016:00002A05: FSM-Sn do Rx-ICRP *Sep 21 14:09:47.682: L2TP 0001A:08016:00002A05:    MTU is 65535 *Sep 21 14:09:47.682: L2TP 0001A:08016:00002A05: Dataplane provisioned, segment 8226 *Sep 21 14:09:47.682: L2TP 0001A:08016:00002A05: Remote AC is now UP *Sep 21 14:09:47.682: L2TP 0001A:08016:00002A05: Local AC is now UP *Sep 21 14:09:47.682: L2TP 0001A:08016:00002A05: VPDN: process AVPs *Sep 21 14:09:47.682: L2TP 0001A:08016:00002A05: FSM-Sn ev ICRP-OK *Sep 21 14:09:47.682: L2TP 0001A:08016:00002A05: FSM-Sn     Proc-ICRP->Wt-Tx-ICCN *Sep 21 14:09:47.682: L2TP 0001A:08016:00002A05: FSM-Sn do Tx-ICCN-Local-Check *Sep 21 14:09:47.682: L2TP 0001A:08016:00002A05:   *Sep 21 14:09:47.682: L2TP 0001A:08016:00002A05:   *Sep 21 14:09:47.682: L2TP 0001A:08016:00002A05: FSM: ICCN->172.16.167.54 waiting for dataplane UP *Sep 21 14:09:47.683: L2TP 0001A:08016:00002A05: Tx ZLB ACK to LNS 22064/2 *Sep 21 14:09:47.683: L2TP:(Tnl35870:Sn10757)L2X setup sss switching *Sep 21 14:09:47.683: L2X:Session DB (Tnl/Sn: 35870/10757): Stored the switching session in the session DB *Sep 21 14:09:47.683: L2TP:(Tnl35870:Sn10757)L2X s/w switching session provisioned *Sep 21 14:09:47.683: L2TP:(Tnl35870:Sn10757)L2TP s/w session mode changed to L2_L2 *Sep 21 14:09:47.683: L2TP:(Tnl35870:Sn10757)L2X s/w switching session bound *Sep 21 14:09:47.683: [26]PPPoE 26: Segment (SSS class): BOUND *Sep 21 14:09:47.683: [26]PPPoE 26: data path set to SSS Switch *Sep 21 14:09:47.684: L2TP 0001A:08016:00002A05: FSM-Sn ev DP-Up *Sep 21 14:09:47.684: L2TP 0001A:08016:00002A05: FSM-Sn     in Wt-Tx-ICCN *Sep 21 14:09:47.684: L2TP 0001A:08016:00002A05: FSM-Sn do Tx-ICCN-Local-Check *Sep 21 14:09:47.684: L2TP 0001A:08016:00002A05: FSM-Sn ev Local-Cont *Sep 21 14:09:47.684: L2TP 0001A:08016:00002A05: FSM-Sn     Wt-Tx-ICCN->established *Sep 21 14:09:47.684: L2TP 0001A:08016:00002A05: FSM-Sn do Tx-ICCN *Sep 21 14:09:47.685: L2TP 0001A:08016:00002A05:   *Sep 21 14:09:47.685: L2TP 0001A:08016:00002A05: Tx ICCN to LNS 22064/2 *Sep 21 14:09:47.685: L2TP 0001A:08016:00002A05:   IETF v2: *Sep 21 14:09:47.685: L2TP 0001A:08016:00002A05:    Framing Type       sync(1) *Sep 21 14:09:47.685: L2TP 0001A:08016:00002A05:    Connect Speed      100000000 *Sep 21 14:09:47.685: L2TP 0001A:08016:00002A05:    Last Sent LCPREQ   [15] *Sep 21 14:09:47.685: L2TP 0001A:08016:00002A05:      0x010405DC0305C2230505062552192B *Sep 21 14:09:47.685: L2TP 0001A:08016:00002A05:    Last Rx LCPREQ     [6] 0x05061D104E53 *Sep 21 14:09:47.685: L2TP 0001A:08016:00002A05:    Proxy Auth Type    2 *Sep 21 14:09:47.685: L2TP 0001A:08016:00002A05:    Proxy Auth Name    *Sep 21 14:09:47.685: L2T ASR1006#P 0001A:08016:00002A05:      "" ParamPreet@cisco.com " *Sep 21 14:09:47.685: L2TP 0001A:08016:00002A05:    Proxy Auth Chal    [16] *Sep 21 14:09:47.685: L2TP 0001A:08016:00002A05:      0x512E93022BEAF02DC9B8D242D139F23B *Sep 21 14:09:47.685: L2TP 0001A:08016:00002A05:    Proxy Auth ID      1 *Sep 21 14:09:47.685: L2TP 0001A:08016:00002A05:    Proxy Auth Resp    [16] *Sep 21 14:09:47.685: L2TP 0001A:08016:00002A05:      0xDF93463A1158B2FA5FD3182331E79C1E *Sep 21 14:09:47.685: L2TP 0001A:08016:00002A05:    Rx Speed           100000000 *Sep 21 14:09:47.685: L2TP 0001A:08016:00002A05:   Cisco v2: *Sep 21 14:09:47.685: L2TP 0001A:08016:00002A05:    Fixed CHAP Ch ID   0 *Sep 21 14:09:47.685: L2TP 0001A:08016:00002A05:   *Sep 21 14:09:47.686: L2TP 0001A:08016:00002A05: O ICCN 22064/2 ns/nr 3/2. cur/max resendQ sz 0/10 *Sep 21 14:09:47.686: L2TP 0001A:08016:00002A05: Tx ICCN, flg TLS, ver 2, len 171 *Sep 21 14:09:47.686: L2TP 0001A:08016:00002A05:    tnl 22064, lsid 10757, rsid 2, ns 3, nr 2 *Sep 21 14:09:47.686: contiguous pak, size 171             C8 02 00 AB 56 30 00 02 00 03 00 02 80 08 00 00             00 00 00 0C 80 0A 00 00 00 13 00 00 00 01 80 0A             00 00 00 18 05 F5 E1 00 00 15 00 00 00 1B 01 04             05 DC 03 05 C2 23 05 05 06 25 52 19 2B 00 0C 00             00 00 1C 05 06 1D 10 4E 53 00 08 00 00 00 1D 00             02 00 15 00 00 00 1E 6A 61 79 75 32 40 63 69 73             63 6F 2E 63 6F 6D 00 16 00 00 00 1F 51 2E 93 02             2B EA F0 2D C9 B8 D2 42 D1 39 F2 3B 00 08 00 00             00 20 00 01 00 16 00 00 00 21 DF 93 46 3A 11 58             B2 FA 5F D3 18 23 31 E7 9C 1E 00 0A 00 00 00 26 *Sep 21 14:09:47.686:             ... *Sep 21 14:09:47.686: L2TP 0001A:08016:00002A05: FSM-Sn ev Established *Sep 21 14:09:47.686: L2TP 0001A:08016:00002A05: FSM-Sn     in established *Sep 21 14:09:47.686: L2TP 0001A:08016:00002A05: FSM-Sn do Established *Sep 21 14:09:47.686: L2TP 0001A:08016:00002A05: Session up *Sep 21 14:09:47.686: L2TP 0001A:08016:00002A05:    172.16.163.48<->172.16.167.54 *Sep 21 14:09:47.686: L2X:Punting to L2TP control message queue *Sep 21 14:09:47.687: [26]PPPoE 26: AAA get dynamic attrs *Sep 21 14:09:47.687: L2TP tnl    08016:00008C1E: Drain unsentQ, cur/max resendQ sz 0/10, unsentQ 0 *Sep 21 14:09:47.687: L2TP tnl    08016:00008C1E:   *Sep 21 14:09:47.687: L2TP tnl    08016:00008C1E: Rx ZLB ACK, flg TLS, ver 2, len 12 *Sep 21 14:09:47.687: L2TP tnl    08016:00008C1E:    tnl 35870, ns 2, nr 4 *Sep 21 14:09:47.687: L2TP tnl    08016:00008C1E:   *Sep 21 14:09:47.687: contiguous pak, size 12             C8 02 00 0C 8C 1E 00 00 00 02 00 04 *Sep 21 14:09:47.690: ppp26 PPP: Phase is FORWARDED, Session Forwarded *Sep 21 14:09:47.690: [26]PPPoE 26: State LCP_NEGOTIATION     Event PPP FORWARDED *Sep 21 14:09:47.690: [26]PPPoE 26: Connected Forwarded ASR1006# ASR1006# ASR1006# ASR1006#sh vpdn L2TP Tunnel and Session Information Total tunnels 1 sessions 1 LocTunID    RemTunID    Remote Name    State   Remote Address   Sessn L2TP Class/                                                            Count VPDN Group 45050       64102       LNS            est     172.16.167.54    1      LAC             LocID       RemID       TunID       Username, Intf/       State   Last Chg Uniq ID                                     Vcid, Circuit                                   44667       5           45050       Para..., Gi0/0/1.666 est     00:01:03 23         ASR1006# ASR1006#sh vpdn tunnel all L2TP Tunnel Information Total tunnels 1 sessions 1 Tunnel id 45050 is up, remote id is 64102, 1 active sessions   Locally initiated tunnel   Tunnel state is established, time since change 00:01:21   Tunnel transport is UDP (17)   Remote tunnel name is LNS     Internet Address 172.16.167.54, port 1701   Local tunnel name is LAC     Internet Address 172.16.163.48, port 1701   L2TP class for tunnel is LAC   Counters, taking last clear into account:     29 packets sent, 26 received     1298 bytes sent, 788 received     Last clearing of counters never   Counters, ignoring last clear:     29 packets sent, 26 received     1298 bytes sent, 788 received   Control Ns 4, Nr 2   Local RWS 1024 (default), Remote RWS 5000   In Use Remote RWS 10   Control channel Congestion Control is disabled   Tunnel PMTU checking disabled   Retransmission time 1, max 1 seconds   Unsent queuesize 0, max 0   Resend queuesize 0, max 2   Total resends 0, ZLB ACKs sent 1   Total out-of-order dropped pkts 0   Total out-of-order reorder pkts 0   Total peer authentication failures 0   Current no session pak queue check 0 of 5   Retransmit time distribution: 0 0 0 0 0 0 0 0 0   Control message authentication is disabled   VPDN group for tunnel is LAC   Tunnel domain is CISCO-SERVICE ASR1006# ASR1006# ASR1006#sh vpdn session all L2TP Session Information Total tunnels 1 sessions 1 Session id 44667 is up, logical session id 32788, tunnel id 45050        Remote session id is 5, remote tunnel id 64102        Locally initiated session   Unique ID is 23   L2-L2 IDB switching enabled   Session username is ParamPreet@cisco.com     Interface Gi0/0/1.666 Call serial number is 3057500004 Remote tunnel name is LNS   Internet address is 172.16.167.54 Local tunnel name is LAC   Internet address is 172.16.163.48 IP protocol 17   Session is L2TP signaled   Session state is established, time since change 00:01:38     31 Packets sent, 28 received     1326 Bytes sent, 816 received   Last clearing of counters never   Counters, ignoring last clear:     31 Packets sent, 28 received     1326 Bytes sent, 816 received     Receive packets dropped:       out-of-order:              0       other:                     0       total:                     0     Send packets dropped:       exceeded session MTU:      0       other:                     0       total:                     0   DF bit off, ToS reflect disabled, ToS value 0, TTL value 0   Sending UDP checksums are disabled   Received UDP checksums are ignored   No session cookie information available   FS cached header information:     encap size = 36 bytes     4500001c 00000000 ff111949 ac10a330     ac10a736 06a506a5 00080000 0202fa66     00050000   Sequencing is off   Conditional debugging is disabled   SSM switch id is 4118, SSM segment id is 8220 ASR1006# ! PPPoE user disconnects the session *Sep 21 14:10:54.272: PPPoE 26: I PADT   R:001b.d4ee.63c1 L:0024.14ab.d701 666 Gi0/0/1.666 ! PADT is received from the PPPoE client and session needs to be disconnected contiguous pak, size 64             00 24 14 AB D7 01 00 1B D4 EE 63 C1 81 00 02 9A             88 63 11 A7 00 1A 00 00 00 00 00 00 00 00 00 00             00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00             00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 *Sep 21 14:10:54.272: ppp26 PPP DISC: Lower Layer disconnected *Sep 21 14:10:54.272: ppp26 PPP: Sending Acct Event[Down] id[2A] *Sep 21 14:10:54.272: [26]PPPoE 26: Destroying   R:001b.d4ee.63c1 L:0024.14ab.d701 666 Gi0/0/1.666 *Sep 21 14:10:54.272: [26]PPPoE 26: AAA get dynamic attrs *Sep 21 14:10:54.272: [26]PPPoE 26: AAA account stopped *Sep 21 14:10:54.273: ppp26 LCP: Event[DOWN] State[Open to Starting] *Sep 21 14:10:54.273: ppp26 PPP: Clearing AAA Unique Id = 2A *Sep 21 14:10:54.273: ppp26 PPP: Phase is DOWN *Sep 21 14:10:54.274: L2TUN APP: uid:26/handle/4118Free switch hdl 4121 *Sep 21 14:10:54.274: L2TUN APP: uid:26/handle/4118shutdown app session *Sep 21 14:10:54.276: L2TP 0001A:08016:00002A05: Shutting down session *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:    Result Code *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:      Call disconnected, refer to error msg (2) *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:    Error Code *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:      Vendor specific (6) *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:    Vendor Error *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:      None (0) *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:    Optional Message *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:      "user-request/Call Disconnect" *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:   *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05: FSM-Sn ev App-Disc *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05: FSM-Sn     in established *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05: FSM-Sn do App-Disc-Active *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:   *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05: Tx CDN to LNS 22064/2 ! LAC will send CDN to LNS for Connection Disconnect *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:   IETF v2: *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:    Result Code        *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:      Call disconnected, refer to error msg(2) *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:      Error code *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:        Vendor specific(6) *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:      Optional msg *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:         " *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:         "user-request/Call Disconnect" *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:    Assigned Call ID   0x00002A05 (10757) *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:    PPP Disconnect Cause Code (IETF)     disconnected, code 3, direction local for CP 0x0 *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:   Cisco v2: *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:    PPP Disconnect Cause Code (Cisco)     disconnected, code 3, direction local for CP 0x0 *Sep 21 14:10:54.277: L2TP 0001A:08016:00002A05:   *Sep 21 14:10:54.278: L2TP 0001A:08016:00002A05: O CDN 22064/2 ns/nr 4/2. cur/max resendQ sz 0/10 *Sep 21 14:10:54.278: L2TP 0001A:08016:00002A05: Tx CDN, flg TLS, ver 2, len 88 *Sep 21 14:10:54.278: L2TP 0001A:08016:00002A05:    tnl 22064, lsid 10757, rsid 2, ns 4, nr 2 *Sep 21 14:10:54.278: contiguous pak, size 88             C8 02 00 58 56 30 00 02 00 04 00 02 80 08 00 00             00 00 00 0E 80 26 00 00 00 01 00 02 00 06 75 73             65 72 2D 72 65 71 75 65 73 74 2F 43 61 6C 6C 20             44 69 73 63 6F 6E 6E 65 63 74 80 08 00 00 00 0E             2A 05 00 0B 00 00 00 2E 00 03 00 00 02 00 0B 00             09 00 68 00 03 00 00 02 *Sep 21 14:10:54.278: L2X         _____:________: class [VPDN group LAC ip addr 172.16.167.54 client LAC] *Sep 21 14:10:54.278: L2X         _____:________:    App unlocked 1->0 *Sep 21 14:10:54.278: L2TP:(Tnl35870:Sn10757)L2X s/w switching session unbound *Sep 21 14:10:54.278: [26]PPPoE 26: Segement (SSS class): UNPROVISION *Sep 21 14:10:54.279: L2X:Punting to L2TP control message queue *Sep 21 14:10:54.279: L2TP 0001A:08016:00002A05: Session down *Sep 21 14:10:54.279: L2TP 0001A:08016:00002A05:    172.16.163.48<->172.16.167.54 *Sep 21 14:10:54.279: L2TP 0001A:08016:00002A05: Destroying session *Sep 21 14:10:54.279: L2TP 0001A:08016:00002A05: Dataplane deallocated, segment 0 *Sep 21 14:10:54.279: L2TP tnl    08016:00008C1E: FSM-CC ev Session-Disc *Sep 21 14:10:54.279: L2TP tnl    08016:00008C1E: FSM-CC     in established *Sep 21 14:10:54.279: L2TP tnl    08016:00008C1E: FSM-CC do Session-Disc-Est *Sep 21 14:10:54.279: L2TP tnl    08016:00008C1E:    Session count now 0 *Sep 21 14:10:54.279: L2TP tnl    08016:00008C1E:    VPDN Session count now 0 *Sep 21 14:10:54.279: L2TP tnl    08016:00008C1E: FSM-CC ev No-Users *Sep 21 14:10:54.279: L2TP tnl    08016:00008C1E: FSM-CC     established->Est-No-User *Sep 21 14:10:54.279: L2TP tnl    08016:00008C1E: FSM-CC do No-Users *Sep 21 14:10:54.279: L2TP tnl    08016:00008C1E: No more cc users, shutdown (likely) in 15 secs *Sep 21 14:10:54.279: L2TP 0001A:_____:________: Session detached *Sep 21 14:10:54.279: L2X   0001A:_____:________: Destroying logical session *Sep 21 14:10:54.280: L2TP tnl    08016:00008C1E: Drain unsentQ, cur/max resendQ sz 0/10, unsentQ 0 *Sep 21 14:10:54.280: L2TP tnl    08016:00008C1E:   *Sep 21 14:10:54.280: L2TP tnl    08016:00008C1E: Rx ZLB ACK, flg TLS, ver 2, len 12 *Sep 21 14:10:54.280: L2TP tnl    08016:00008C1E:    tnl 35870, ns 2, nr 5 ASR1006# *Sep 21 14:10:54.280: L2TP tnl    08016:00008C1E:   *Sep 21 14:10:54.280: contiguous pak, size 12             C8 02 00 0C 8C 1E 00 00 00 02 00 05 *Sep 21 14:10:54.280: L2TP:(Tnl35870:Sn10757)L2X s/w switching session unprovisioned *Sep 21 14:10:54.280: L2X:Session DB (Tnl/Sn: 35870/10757): Removed the switching session from the session DB *Sep 21 14:10:54.499: ppp26 PPP: Free Context [34846A2C] ASR1006# *Sep 21 14:11:04.279: L2X:Punting to L2TP control message queue *Sep 21 14:11:04.279: L2TP tnl    08016:00008C1E: StopCCN: skip authen, no nonce yet *Sep 21 14:11:04.279: L2TP tnl    08016:00008C1E: L2TP: Parse IETF AVP 9, len 8, flag 0x8000 (M) *Sep 21 14:11:04.279: L2TP tnl    08016:00008C1E: L2TP: Parse IETF AVP 1, len 10, flag 0x8000 (M) *Sep 21 14:11:04.279: L2TP tnl    08016:00008C1E: No missing AVPs in StopCCN *Sep 21 14:11:04.279: L2TP tnl    08016:00008C1E:   *Sep 21 14:11:04.279: L2TP tnl    08016:00008C1E: Rx StopCCN, flg TLS, ver 2, len 38 *Sep 21 14:11:04.279: L2TP tnl    08016:00008C1E:    tnl 35870, ns 2, nr 5 *Sep 21 14:11:04.279: L2TP tnl    08016:00008C1E:   IETF v2: *Sep 21 14:11:04.279: L2TP tnl    08016:00008C1E:    Result Code        *Sep 21 14:11:04.279: L2TP tnl    08016:00008C1E:      General error - refer to error code(1) *Sep 21 14:11:04.279: L2TP tnl    08016:00008C1E:      Error code *Sep 21 14:11:04.279: L2TP tnl    08016:00008C1E:        No error(0) *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E:    Assigned Tunnel I 0x00005630 (22064) *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E:   *Sep 21 14:11:04.280: contiguous pak, size 38             C8 02 00 26 8C 1E 00 00 00 02 00 05 80 08 00 00             00 00 00 04 80 08 00 00 00 09 56 30 80 0A 00 00             00 01 00 01 00 00 *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E: Tx ZLB ACK to LNS tnl 22064 *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E:   *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E: Rx StopCCN from LNS tnl 22064 *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E: FSM-CC ev Rx-StopCCN *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E: FSM-CC     in Est-No-User *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E: FSM-CC do Rx-StopCCN *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E:   *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E: Shutting down tunnel *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E:    Result Code *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E:      General error - refer to error code *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E:    Error Code *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E:      No error *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E:    Vendor Error *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E:      None *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E:    Optional Message *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E:      "No disconnect reason given" *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E:   *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E: FSM-CC ev Shut-Now *Sep 21 14:11:04.280: L2TP tnl   08016:00008C1E: FSM-CC     Est-No-User->Wt-STOPACK *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E: FSM-CC do Shutnow *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E: FSM-CC ev Shut-Comp *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E: FSM-CC     Wt-STOPACK->Dead *Sep 21 14:11:04.280: L2TP tnl    08016:00008C1E: FSM-CC do Shutdown-Completed *Sep 21 14:11:04.281: L2TP tnl    08016:00008C1E: Tunnel accounting send not possible - no id *Sep 21 14:11:04.281: L2TP tnl    08016:00008C1E: Control channel down *Sep 21 14:11:04.281: L2TP tnl    08016:00008C1E:    172.16.163.48<->172.16.167.54 *Sep 21 14:11:04.281: L2TP tnl    08016:00008C1E: Destroying tunnel *Sep 21 14:11:04.281: L2X   tnl    08016:________: Destroying logical tunnel *Sep 21 14:11:04.281: L2X         _____:________: class [VPDN group LAC ip addr 172.16.167.54 client LAC] *Sep 21 14:11:04.281: L2X         _____:________:    Protocol unlocked 1->0 ASR1006# *Sep 21 14:11:04.281: L2X         _____:________: class[VPDN group LAC ip addr 172.16.167.54 client LAC] *Sep 21 14:11:04.281: L2X         _____:________:    no more locks *Sep 21 14:11:04.281: L2X         _____:________: class [VPDN group LAC ip addr 172.16.167.54 client LAC] *Sep 21 14:11:04.281: L2X         _____:________:    deleted ASR1006# ASR1006# ASR1006# ... View more

Configuring and Troubleshooting VWIC2-xCTE1-PRI Modules for Inbound ISDN Multilink PPP Data Calls We have seen more and more customers are now moving away from traditional NM-xCTE1-PRI and HWIC-xCTE1-PRI modules which supports data and modem calls (not voice calls) to VWIC2-xMFT-T1/E1 modules which supports Data and Voice calls together on same PRI lines. We have seen increased deployment of VWIC2-xMFT-T1/E1 modules on Integrated Service Routers that supports voice and data calls on same PRI line. This document describes how to configure ISDN PRI interfaces on VWIC2-xMFT-T1/E1 modules with PVDM2-xx to support data calls on multiservice access routers. This feature enables Multilink PPP data (dial-in, dial-on-demand routing [DDR], and DDR backup) and voice call traffic to occur simultaneously from the supported ISDN PRI interfaces. Supported Modules This feature supports the following modules: –NM-HD –NM-HDV2 –Onboard DSPs •This feature is supported on the following voice cards: –VWIC-XMFT-X interface modules –VWIC2-XMFT-X interface modules Note Data calls are supported only on the NM-HDV2-2T1/E1 and NM-HD-2V-E network modules, and the VWIC-2MFT-E1, VWIC-2MFT-T1 and VWIC2-T1/E1 voice cards. Use the isdn switch-type ? command in interface configuration mode or global configuration mode to view the list of supported ISDN switch types. See the following example: Router(config)# isdn switch-type ?   primary-4ess     Lucent 4ESS switch type for the U.S.   primary-5ess     Lucent 5ESS switch type for the U.S.   primary-dms100   Northern Telecom DMS-100 switch type for the U.S.   primary-dpnss    DPNSS switch type for Europe   primary-net5     NET5 switch type for UK, Europe, Asia and Australia   primary-ni       National ISDN Switch type for the U.S.   primary-ntt      NTT switch type for Japan   primary-qsig     QSIG switch type   primary-ts014    TS014 switch type for Australia (obsolete) Restrictions for Integrating Data and Voice Services for ISDN PRI Interfaces •This feature is supported only on C5510 DSP-based platforms. • ISDN backhaul is not supported. • This feature does not support modem calls. • For platforms that support HDLC resources on the motherboard, the available on board HDLC resources are limited to 31 if all resources are not enabled. • The Cisco 2801 platform does not support full channelized data or full integrated data and voice over T1/E1 PRI interfaces. However, data back up through one PRI channel, or one group of PRI channels for data backup, is supported on this platform. • Only PPP with multilink is supported for multiple channels. HDLC is not supported for multiple channels. • This feature is not supported from a BRI interface. • following dialer commands are not supported with the integrated data and voice feature: –dialer aaa –dialer callback-secure –dialer callback-server –dialer dns –dialer order –dialer persistent –dialer redial –dialer vpdn –dialer watch-disable –dialer watch-group –dialer watch-list – dialer watch-list delay Components Used The information in this document is based on these software and hardware versions in the lab environment ·        Cisco 3845 with VWIC2-2MFT-T1/E1 and PVDM2-64 running IOS® Software Release 12.4(24)T1 ·        Cisco 2811 with WIC-1B-U-V2 running IOS® Software Release 12.4(7h) Note: The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command. Network Diagram This document uses this network setup: In above network diagram, 2811 as a Branch router with BRI lines dialing in to 3845 ISR router with PRI lines using Multilink PPP calls. Detailed configuration of 2811 Branch router is not the intended purpose of this document. Configurations Cisco 2811 Branch router 2811-1#sh run Building configuration... Current configuration : 1165 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname 2811-1 ! boot-start-marker boot system flash:c2800nm-advsecurityk9-mz.124-7h boot-end-marker !enable password cisco ! no aaa new-model ! resource policy ! ip cef ! isdn switch-type basic-5ess ! username cisco password 0 cisco archive log config   hidekeys ! interface GigabitEthernet0/1 ip address 11.0.0.1 255.255.255.0 load-interval 30 duplex auto speed auto ! interface BRI0/0/0 ip address negotiated encapsulation ppp dialer idle-timeout 120 either dialer string 914084283115 dialer load-threshold 2 either dialer-group 1 isdn switch-type basic-5ess isdn point-to-point-setup ppp authentication chap callin ppp chap hostname Param ppp chap password 0 cisco ppp multilink ! ip route 0.0.0.0 255.255.255.255 BRI0/0/0 ! no ip http server no ip http secure-server ! dialer-list 1 protocol ip permit ! ! control-plane ! line con 0 line aux 0 line vty 0 4 password cisco login ! scheduler allocate 20000 1000 ! end 2811-1# 2811-1# sh diag Slot 0:             C2821 Motherboard with 2GE and integrated VPN Port adapter, 2 ports             Port adapter is analyzed             Port adapter insertion time unknown             Onboard VPN                         : v2.2.0             EEPROM contents at hardware discovery:             PCB Serial Number         : FOC08212CQB             Hardware Revision         : 0.9             Top Assy. Part Number     : 800-23519-01             Board Revision            : 13             Deviation Number          : 0             Fab Version               : 08             RMA Test History          : 00             RMA Number                : 0-0-0-0             RMA History               : 00             Processor type            : 87             Hardware date code        : 20040524             Chassis Serial Number     : FHK0829F048             Chassis MAC Address       : 000f.352c.8bf1             MAC Address block size    : 36             CLEI Code                 : CNMJ600BRA             Product (FRU) Number      : CISCO2821                   Part Number               : 73-8854-09             Version Identifier        :    NA             EEPROM format version 4             EEPROM contents (hex):               0x00: 04 FF C1 8B 46 4F 43 30 38 32 31 32 43 51 42 40               0x10: 03 E8 41 00 09 C0 46 03 20 00 5B DF 01 42 31 33               0x20: 88 00 00 00 00 02 08 03 00 81 00 00 00 00 04 00               0x30: 09 87 83 01 31 CB 4C C2 8B 46 48 4B 30 38 32 39               0x40: 46 30 34 38 C3 06 00 0F 35 2C 8B F1 43 00 24 C6               0x50: 8A 43 4E 4D 4A 36 30 30 42 52 41 CB 8F 43 49 53               0x60: 43 4F 32 38 32 31 20 20 20 20 20 20 82 49 22 96               0x70: 09 89 20 20 4E 41 D9 02 40 C1 FF FF FF FF FF FF             WIC Slot 0:             BRI U - 2091, 3086 WAN daughter card             Hardware revision 1.0                      Board revision H0             Serial number      33000351               Part number     800-19400-01             FRU Part Number      WIC-1B-U-V2=                   Test history       0x0                      RMA number      00-00-00             Connector type     Wan Module             EEPROM format version 1             EEPROM contents (hex):               0x20: 01 45 01 00 01 F7 8B 9F 50 4B C8 01 00 00 00 00               0x30: 88 00 00 00 05 01 13 01 FF FF FF FF FF FF FF FF Note: In order for 3845 with VWIC2-2MFT-T1/E1 card to accept the data calls, need to make sure that dial-peer for data calls are configured with incoming called-number matching the DNIS received. If data dial-peer or “incoming called-number “ command is not configured, you will see ISR rejecting the call with following debugs             *Sep 10 21:02:54.389: ISDN Se0/0/1:23 Q931: RX <- SETUP pd = 8   callref = 0x14C9             Bearer Capability i = 0x8890                         Standard = CCITT                         Transfer Capability = Unrestricted Digital                         Transfer Mode = Circuit                         Transfer Rate = 64 kbit/s             Channel ID i = 0xA98381                         Exclusive, Channel 1             Calling Party Number i = 0x2180, '4087775100'                         Plan:ISDN, Type:National             Called Party Number i = 0x80, '83115'                         Plan:Unknown, Type:Unknown *Sep 10 21:02:54.393: ISDN Se0/0/1:23 Q931: Received SETUP   callref = 0x94C9 callID = 0x0008 switch = primary-5ess interface = User *Sep 10 21:02:54.393: //-1/xxxxxxxxxxxx/DPM/dpAssociateIncomingPeerCore:    Calling Number=4087775100, Called Number=83115, Voice-Interface=0x6A0DB574,    Timeout=TRUE, Peer Encap Type=ENCAP_VOICE, Peer Search Type=PEER_TYPE_DATA,    Peer Info Type=DIALPEER_INFO_SPEECH *Sep 10 21:02:54.393: //-1/xxxxxxxxxxxx/DPM/dpAssociateIncomingPeerCore:    Result=NO_MATCH(-1) after DP_MATCH_INCOMING_DNIS *Sep 10 21:02:54.393: //-1/xxxxxxxxxxxx/DPM/dpAssociateIncomingPeerCore:    Calling Number=4087775100, Called Number=83115, Voice-Interface=0x0,    Timeout=TRUE, Peer Encap Type=ENCAP_VOICE, Peer Search Type=PEER_TYPE_DATA,    Peer Info Type=DIALPEER_INFO_SPEECH *Sep 10 21:02:54.393: //-1/xxxxxxxxxxxx/DPM/dpAssociateIncomingPeerCore:    Result=NO_MATCH(-1) after DP_MATCH_INCOMING_DNIS *Sep 10 21:02:54.393: ISDN Se0/0/1:23 Q931: TX -> RELEASE_COMP pd = 8   callref = 0x94C9             Cause i = 0x809C - Invalid number format (incomplete number) Cisco 3845 router : 3845-1#sh run Building configuration... Current configuration : 3877 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption service internal ! hostname 3845-1 ! boot-start-marker boot-end-marker ! card type t1 0 0 !---Need to define a card type about the use of VWIC2-2MFT-T1/E1 card to be a !--- T1 card or a E1 card. Here we are using it as a T1 card. logging message-counter syslog logging buffered 65535 enable secret 5 $1$clc3$GfelyWY1QQs6bCR4lxwl.. ! no aaa new-model network-clock-participate wic 0 !--- Allow other WICs modules to drive the clock from the selected T1 line network-clock-select 1 T1 0/0/1 !---Need to select proper T1 line to source the clock from. ! dot11 syslog ip source-route ip cef ! no ip domain lookup no ipv6 cef ! multilink bundle-name authenticated !---Configure multilink bundle name based on the authenticated username isdn switch-type primary-5ess !--- Switch-type for the PRI circuit. Obtain this information from Telco. ! voice-card 0 ! username 1811-1 password 0 cisco username 1800-1 password 0 cisco username 2811-1 password 0 cisco username preet password 0 cisco username Param password 0 cisco !--- Usernames for local authentication of the call.   !--- The client presents the username/password and the ISR !--- authenticates the peer. archive log config   hidekeys ! controller T1 0/0/0 cablelength long 0db pri-group timeslots 1-24 ! controller T1 0/0/1 cablelength long 0db pri-group timeslots 1-24 !--- For T1 PRI scenarios, all 24 T1 timeslots are assigned as    !--- ISDN PRI channels. The router now automatically creates the    !--- corresponding D-channel: interface Serial 0/0/1:23. !--- Framing for this T1 is Extended Super Frame (ESF) and linecode is !--- B8ZS is default. Obtain these information from the Telco. interface Loopback0 ip address 1.1.1.1 255.255.255.0 ! interface Loopback1 ip address 100.1.1.1 255.255.255.0 ! interface GigabitEthernet0/0 ip address 200.1.1.1 255.255.255.0 duplex auto speed auto media-type rj45 ! interface GigabitEthernet0/1 no ip address shutdown duplex auto speed auto media-type rj45 ! ! interface Serial0/0/0:23 ip unnumbered Loopback1 encapsulation ppp dialer idle-timeout 600 either dialer-group 1 isdn switch-type primary-5ess isdn integrate calltype all peer default ip address pool My-IP ppp authentication chap callin ppp chap hostname 3845-1 ppp chap password 0 cisco ppp multilink ! interface Serial0/0/1:23 !--- D-channel configuration for T1 0/2/0. ip unnumbered Loopback1             !--- A Loopback interface is always up/up. So, unnumber the Loopback !--- interface for stability. encapsulation ppp dialer idle-timeout 600 either !--- Idle Timeout is defined as 600 secs which is 10 mins.   dialer-group 1 !--- Interesting traffic is defined in dialer-list 1.   !--- Note: The specified dialer-group number must be the same as the    !--- dialer-list number. In this example, the number is defined as "1". isdn switch-type primary-5ess isdn integrate calltype all !--- Enables the serial interface for integrated mode, which allows !--- data and voice call traffic to occur simultaneously. peer default ip address pool My-IP !--- Clients are assigned addresses from the IP address pool named My-IP which needs to be configured later in the config. ppp authentication chap callin !--- Use CHAP authentication. ppp multilink !--- Configure the interface to use multilink. !--- Without this command multilink is NOT negotiated. !--- This command is needed to bind more than one calls from the same !--- user together. ppp chap hostname 3845-1 ppp chap password 0 cisco ! ! ip local pool My-IP 100.1.1.2 100.1.1.100 !--- IP address pools for dialin clients. ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 200.1.1.2 ip http server no ip http secure-server ! dialer-list 1 protocol ip permit ! control-plane ! voice-port 0/0/1:23 ! mgcp fax t38 ecm mgcp behavior g729-variants static-pt ! dial-peer data 1 pots incoming called-number 83115 !--- For data dial-peer matching, only the called number of an incoming call is !--- used to match the incoming called number of POTS dial peers. Wild cards !--- are accepted. The string must match the number received in ISDN SETUP !--- message for data call. dial-peer search type data voice !--- Configures the preference of voice or data dial-peer lookup during the !--- calltype checking for incoming ISDN calls. line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 privilege level 15 password cisco login ! line vty 0 4 exec-timeout 60 0 privilege level 15 password cisco logging synchronous login line vty 5 10 exec-timeout 60 0 privilege level 15 password cisco logging synchronous login ! scheduler allocate 20000 1000 end 3845-1#show diag Slot 0:             C3845 Mother board 1GE(TX,SFP),1GE(TX), integrated VPN and 4W Port adapter, 13 ports             <snip>             PVDM Slot 0:             64-channel (G.711) Voice/Fax PVDMII DSP SIMM PVDM daughter card             Hardware Revision         : 4.0             Part Number               : 73-8541-05             Board Revision            : A0             Deviation Number          : 0             Fab Version               : 04             PCB Serial Number         : FOC10202UFD             RMA Test History          : 00             RMA Number                : 0-0-0-0             RMA History               : 00             Processor type            : 00             Product (FRU) Number      : PVDM2-64             Version Identifier        : V01             <snip>             WIC Slot 0:             VWIC2-2MFT-T1/E1 - 2-Port RJ-48 Multiflex Trunk - T1/E1             Hardware Revision         : 0.0             Top Assy. Part Number     : 800-22629-05             Board Revision            : B0             Deviation Number          : 0             Fab Version               : 04             PCB Serial Number         : FOC11240T31             RMA Test History          : 00             RMA Number                : 0-0-0-0             RMA History               : 00             Product (FRU) Number      : VWIC2-2MFT-T1/E1             3845-1#sh network-clocks   Network Clock Configuration   ---------------------------   Priority       Clock Source     Clock State      Clock Type      1           T1 0/0/1         GOOD             T1               11           Backplane        GOOD             PLL            Current Primary Clock Source   ---------------------------   Priority       Clock Source     Clock State      Clock Type      1           T1 0/0/1         GOOD             T1           Use the following commands to troubleshoot integrated data for ISDN interfaces: debug dialer events —Used to display debugging information about the packets received on a dialer interface. debug isdn q931 —Used to check outgoing dial-peer matching for an ISDN incoming call. Enable this command on both sides of the call. The output indicates whether the messages are generated by the calling party router (indicated by TX ->) or by the called party router (indicated by RX <-). debug voip ccapi inout —Used to show how a call flows through the system. From the output, you can see the call setup and teardown operations performed on both the telephony and network call legs. show isdn active and show isdn status—Used to show the active data and voice calls. debug ppp negotiation —displays information on the PPP traffic and exchanges, and negotiates Link Control Protocol (LCP), Authentication, and Network Control Protocol (NCP). A successful PPP negotiation first opens the LCP state, then authenticates, and finally negotiates NCP. Multilink Parameters such as Maximum Receive Reconstructed Unit (MRRU) are established during LCP negotiation. debug ppp error —displays protocol errors and error statistics associated with PPP connection negotiation and operation. debug ppp authentication —displays PPP authentication protocol messages, including CHAP packet exchanges and Password Authentication Protocol (PAP) exchanges . debug voip dialpeer all —displays dialpeer selection based on the incoming digits 3845-1#debug isdn q931 debug isdn q931 is                         ON. 3845-1#debug ppp negotiation PPP protocol negotiation debugging is on 3845-1#debug ppp authentication PPP authentication debugging is on 3845-1#debug dialer Dial on demand events debugging is on 3845-1#debug voip dialpeer voip dialpeer default debugging is on 3845-1#debug voip ccapi inout voip ccapi inout debugging is on 3845-1#sh debug PPP:   PPP authentication debugging is on   PPP protocol errors debugging is on PPP protocol negotiation debugging is on The following ISDN debugs are enabled on all DSLs: debug isdn error is                         ON. debug isdn q931 is                         ON.    (filter is OFF) DIALPEER:   debug voip dialpeer error call is ON (filter is OFF)   debug voip dialpeer error call informational is ON (filter is OFF)   debug voip dialpeer error software is ON   debug voip dialpeer error software informational is ON   debug voip dialpeer function is ON (filter is OFF)   debug voip dialpeer inout is ON (filter is OFF)   debug voip dialpeer detail is ON (filter is OFF) CCAPI:   debug voip ccapi inout is ON (filter is OFF) 3845-1# 3845-1# *Sep   9 17:14:40.368: ISDN Se0/0/1:23 Q931: RX <- SETUP pd = 8   callref = 0x1479             Bearer Capability i = 0x8890                         Standard = CCITT                         Transfer Capability = Unrestricted Digital                         Transfer Mode = Circuit                         Transfer Rate = 64 kbit/s             Channel ID i = 0xA98381                         Exclusive, Channel 1             Calling Party Number i = 0x2180, '4087775100'                         Plan:ISDN, Type:National             Called Party Number i = 0x80, '83115'                         Plan:Unknown, Type:Unknown *Sep   9 17:14:40.368: ISDN Se0/0/1:23 Q931: Received SETUP   callref = 0x9479 callID = 0x0016 switch = primary-5ess interface = User *Sep   9 17:14:40.368: //-1/xxxxxxxxxxxx/DPM/dpAssociateIncomingPeerCore:    Calling Number=4087775100, Called Number=83115, Voice-Interface=0x6A16A13C,    Timeout=TRUE, Peer Encap Type=ENCAP_VOICE, Peer Search Type=PEER_TYPE_DATA,    Peer Info Type=DIALPEER_INFO_SPEECH *Sep   9 17:14:40.368: //-1/xxxxxxxxxxxx/DPM/dpAssociateIncomingPeerCore:    Match Rule=DP_MATCH_INCOMING_DNIS; Called Number=83115 *Sep   9 17:14:40.368: //-1/xxxxxxxxxxxx/DPM/dpMatchPeertype:    Is Incoming=TRUE, Number Expansion=FALSE *Sep   9 17:14:40.372: //-1/xxxxxxxxxxxx/DPM/dpMatchCore:    Dial String=83115, Expanded String=83115, Calling Number=    Timeout=TRUE, Is Incoming=TRUE, Peer Info Type=DIALPEER_INFO_SPEECH *Sep   9 17:14:40.372: //-1/xxxxxxxxxxxx/DPM/MatchNextPeer:    Result=Success(0); Incoming Dial-peer=1 Is Matched *Sep   9 17:14:40.372: //-1/xxxxxxxxxxxx/DPM/dpMatchPeertype:exit@5615 *Sep   9 17:14:40.372: //-1/xxxxxxxxxxxx/DPM/dpAssociateIncomingPeerCore:    Result=Success(0) after DP_MATCH_INCOMING_DNIS; Incoming Dial-peer=1 *Sep   9 17:14:40.372: //-1/xxxxxxxxxxxx/DPM/dpAssociateIncomingPeerSPI:exit@6169 *Sep   9 17:14:40.372: %LINK-3-UPDOWN: Interface Serial0/0/1:0, changed state to up *Sep   9 17:14:40.372: %ISDN-6-CONNECT: Interface Serial0/0/1:0 is now connected to 4087775100 N/A *Sep   9 17:14:40.372: ISDN Se0/0/1:23 Q931: TX -> CALL_PROC pd = 8   callref = 0x9479             Channel ID i = 0xA98381                         Exclusive, Channel 1 *Sep   9 17:14:40.372: ISDN Se0/0/1:23 Q931: TX -> CONNECT pd = 8   callref = 0x9479             Channel ID i = 0xA98381                         Exclusive, Channel 1 *Sep   9 17:14:40.372: Se0/0/1:0 PPP: Using dialer call direction *Sep   9 17:14:40.372: Se0/0/1:0 PPP: Treating connection as a callin *Sep   9 17:14:40.372: Se0/0/1:0 PPP: Session handle[1200007E] Session id[29] *Sep   9 17:14:40.372: Se0/0/1:0 PPP: Phase is ESTABLISHING, Passive Open *Sep   9 17:14:40.372: Se0/0/1:0 LCP: State is Listen *Sep   9 17:14:40.384: ISDN Se0/0/1:23 Q931: RX <- CONNECT_ACK pd = 8   callref = 0x1479 *Sep   9 17:14:40.616: Se0/0/1:0 LCP: I CONFREQ [Listen] id 10 len 22 *Sep   9 17:14:40.616: Se0/0/1:0 LCP:     MagicNumber 0x36F9583B (0x050636F9583B) *Sep   9 17:14:40.616: Se0/0/1:0 LCP:     MRRU 1524 (0x110405F4) *Sep   9 17:14:40.616: Se0/0/1:0 LCP:     EndpointDisc 1 Param (0x130801506172616D) *Sep   9 17:14:40.616: Se0/0/1:0 PPP: Authorization required *Sep   9 17:14:40.616: Se0/0/1:0 LCP: O CONFREQ [Listen] id 3 len 28 *Sep   9 17:14:40.616: Se0/0/1:0 LCP:     AuthProto CHAP (0x0305C22305) *Sep   9 17:14:40.616: Se0/0/1:0 LCP:     MagicNumber 0x4817A467 (0x05064817A467) *Sep   9 17:14:40.616: Se0/0/1:0 LCP:     MRRU 1524 (0x110405F4) *Sep   9 17:14:40.616: Se0/0/1:0 LCP:     EndpointDisc 1 3845-1 (0x130901333834352D31) *Sep   9 17:14:40.616: Se0/0/1:0 LCP: O CONFACK [Listen] id 10 len 22 *Sep   9 17:14:40.616: Se0/0/1:0 LCP:     MagicNumber 0x36F9583B (0x050636F9583B) *Sep   9 17:14:40.616: Se0/0/1:0 LCP:     MRRU 1524 (0x110405F4) *Sep   9 17:14:40.616: Se0/0/1:0 LCP:     EndpointDisc 1 Param (0x130801506172616D) *Sep   9 17:14:40.632: Se0/0/1:0 LCP: I CONFACK [ACKsent] id 3 len 28 *Sep   9 17:14:40.632: Se0/0/1:0 LCP:     AuthProto CHAP (0x0305C22305) *Sep   9 17:14:40.632: Se0/0/1:0 LCP:     MagicNumber 0x4817A467 (0x05064817A467) *Sep   9 17:14:40.632: Se0/0/1:0 LCP:     MRRU 1524 (0x110405F4) *Sep   9 17:14:40.632: Se0/0/1:0 LCP:     EndpointDisc 1 3845-1 (0x130901333834352D31) *Sep   9 17:14:40.632: Se0/0/1:0 LCP: State is Open *Sep   9 17:14:40.632: Se0/0/1:0 PPP: Phase is AUTHENTICATING, by this end *Sep   9 17:14:40.632: Se0/0/1:0 CHAP: O CHALLENGE id 3 len 27 from "3845-1" *Sep   9 17:14:40.648: Se0/0/1:0 CHAP: I RESPONSE id 3 len 26 from "Param" *Sep   9 17:14:40.648: Se0/0/1:0 PPP: Phase is FORWARDING, Attempting Forward *Sep   9 17:14:40.652: Se0/0/1:0 PPP: Phase is AUTHENTICATING, Unauthenticated User *Sep   9 17:14:40.652: Se0/0/1:0 PPP: Sent CHAP LOGIN Request *Sep   9 17:14:40.652: Se0/0/1:0 PPP: Received LOGIN Response PASS *Sep   9 17:14:40.652: Se0/0/1:0 PPP: Phase is FORWARDING, Attempting Forward *Sep   9 17:14:40.652: Se0/0/1:0 PPP: Phase is AUTHENTICATING, Authenticated User *Sep   9 17:14:40.652: Se0/0/1:0 PPP: Sent LCP AUTHOR Request *Sep   9 17:14:40.652: Se0/0/1:0 PPP: Sent MLP AUTHOR Request *Sep   9 17:14:40.652: Se0/0/1:0 PPP: Sent IPCP AUTHOR Request *Sep   9 17:14:40.652: Se0/0/1:0 LCP: Received AAA AUTHOR Response PASS *Sep   9 17:14:40.652: Se0/0/1:0 MLP: Received AAA AUTHOR Response PASS *Sep   9 17:14:40.652: Se0/0/1:0 IPCP: Received AAA AUTHOR Response PASS *Sep   9 17:14:40.652: Se0/0/1:0 CHAP: O SUCCESS id 3 len 4 *Sep   9 17:14:40.652: Se0/0/1:0 PPP: Phase is VIRTUALIZED *Sep   9 17:14:40.656: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up *Sep   9 17:14:40.656: Vi1 MLP: Added first link Se0/0/1:0 to bundle Param *Sep   9 17:14:40.656: Vi1 PPP: Phase is DOWN, Setup *Sep   9 17:14:40.656: Vi1 PPP: Phase is UP *Sep   9 17:14:40.656: Vi1 IPCP: O CONFREQ [Closed] id 1 len 10 *Sep   9 17:14:40.656: Vi1 IPCP:     Address 100.1.1.1 (0x030664010101) *Sep   9 17:14:40.656: Vi1 PPP: Sent CDPCP AUTHOR Request *Sep   9 17:14:40.656: Vi1 PPP: Process pending ncp packets *Sep   9 17:14:40.656: Se0/0/1:0 PPP: Process pending ncp packets *Sep   9 17:14:40.656: Se0/0/1:0 PPP: Process pending ncp packets *Sep   9 17:14:40.656: Vi1 CDPCP: Received AAA AUTHOR Response PASS *Sep   9 17:14:40.656: Vi1 CDPCP: O CONFREQ [Closed] id 1 len 4 *Sep   9 17:14:40.672: Vi1 IPCP: I CONFREQ [REQsent] id 1 len 10 *Sep   9 17:14:40.672: Vi1 IPCP:     Address 0.0.0.0 (0x030600000000) *Sep   9 17:14:40.672: Vi1 AAA/AUTHOR/IPCP: Start.   Her address 0.0.0.0, we want 0.0.0.0 *Sep   9 17:14:40.672: Vi1 AAA/AUTHOR/IPCP: Done.   Her address 0.0.0.0, we want 0.0.0.0 *Sep   9 17:14:40.672: Vi1 IPCP: Pool returned 100.1.1.7 *Sep   9 17:14:40.672: Vi1 IPCP: O CONFNAK [REQsent] id 1 len 10 *Sep   9 17:14:40.672: Vi1 IPCP:     Address 100.1.1.7 (0x030664010107) *Sep   9 17:14:40.672: Vi1 CDPCP: I CONFREQ [REQsent] id 1 len 4 *Sep   9 17:14:40.672: Vi1 CDPCP: O CONFACK [REQsent] id 1 len 4 3845-1# *Sep   9 17:14:40.672: Vi1 IPCP: I CONFACK [REQsent] id 1 len 10 *Sep   9 17:14:40.672: Vi1 IPCP:     Address 100.1.1.1 (0x030664010101) *Sep   9 17:14:40.684: Vi1 IPCP: I CONFREQ [ACKrcvd] id 2 len 10 *Sep   9 17:14:40.684: Vi1 IPCP:     Address 100.1.1.7 (0x030664010107) *Sep   9 17:14:40.684: Vi1 IPCP: O CONFACK [ACKrcvd] id 2 len 10 *Sep   9 17:14:40.684: Vi1 IPCP:     Address 100.1.1.7 (0x030664010107) *Sep   9 17:14:40.684: Vi1 IPCP: State is Open *Sep   9 17:14:40.684: Se0/0/1:23 IPCP: Install route to 100.1.1.7 *Sep   9 17:14:40.684: Vi1 IPCP: Add link info for cef entry 100.1.1.7 3845-1# *Sep   9 17:14:41.652: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/1:0, changed state to up *Sep   9 17:14:41.656: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access1, changed state to up 3845-1#sh users     Line        User        Host(s)               Idle        Location    0 con 0                 1.1.1.1                   1w1d   tty 0/514                idle                      1w1d 1.1.1.1 *706 vty 0                 idle                  00:00:00 171.69.89.61   Interface     User                Mode          Idle      Peer Address   Vi1           Param               MLP Bundle    00:00:20 100.1.1.7   Se0/0/1:0     Param               Sync PPP      -         Bundle: Vi1 3845-1#sh caller timeouts   Line            User                Limit      Remaining Timer Type   con 0           -                   -          -          -            tty 0/514       -                   -          -          -            vty 706         -                   01:00:00   00:59:59   Idle Exec   Se0/0/1:0       Param               -          -          -            Vi1             Param               00:10:00   00:09:34   Dialer idle 3845-1# 3845-1#sh dialer map Dynamic dialer map ip 100.1.1.7    name Param      () on Se0/0/1:23 3845-1#sh ppp multilink Virtual-Access1   Bundle name: Param   Remote Username: Param   Remote Endpoint Discriminator: [1] Param   Local Username: 3845-1   Local Endpoint Discriminator: [1] 3845-1   Bundle up for 00:00:55, total bandwidth 64, load 1/255   Receive buffer limit 12192 bytes, frag timeout 1524 ms   Dialer interface is Serial0/0/1:23     0/0 fragments/bytes in reassembly list     0 lost fragments, 0 reordered     0/0 discarded fragments/bytes, 0 lost received     0x0 received sequence, 0x0 sent sequence   Member links: 1 (max not set, min not set)     Se0/0/1:0, since 00:00:55 No inactive multilink interfaces 3845-1# 2 nd call from the branch router come in *Sep   9 17:15:47.128: ISDN Se0/0/1:23 Q931: RX <- SETUP pd = 8   callref = 0x147A             Bearer Capability i = 0x8890                         Standard = CCITT                         Transfer Capability = Unrestricted Digital                         Transfer Mode = Circuit                         Transfer Rate = 64 kbit/s             Channel ID i = 0xA98382                         Exclusive, Channel 2             Calling Party Number i = 0x2180, '4087775100'                         Plan:ISDN, Type:National             Called Party Number i = 0x80, '83115'                         Plan:Unknown, Type:Unknown *Sep   9 17:15:47.132: ISDN Se0/0/1:23 Q931: Received SETUP   callref = 0x947A callID = 0x0017 switch = primary-5ess interface = User *Sep   9 17:15:47.132: //-1/xxxxxxxxxxxx/DPM/dpAssociateIncomingPeerCore:    Calling Number=4087775100, Called Number=83115, Voice-Interface=0x6A16A13C,    Timeout=TRUE, Peer Encap Type=ENCAP_VOICE, Peer Search Type=PEER_TYPE_DATA,    Peer Info Type=DIALPEER_INFO_SPEECH *Sep   9 17:15:47.132: //-1/xxxxxxxxxxxx/DPM/dpAssociateIncomingPeerCore:    Match Rule=DP_MATCH_INCOMING_DNIS; Called Number=83115 *Sep   9 17:15:47.132: //-1/xxxxxxxxxxxx/DPM/dpMatchPeertype:    Is Incoming=TRUE, Number Expansion=FALSE *Sep   9 17:15:47.132: //-1/xxxxxxxxxxxx/DPM/dpMatchCore:    Dial String=83115, Expanded String=83115, Calling Number=    Timeout=TRUE, Is Incoming=TRUE, Peer Info Type=DIALPEER_INFO_SPEECH *Sep   9 17:15:47.132: //-1/xxxxxxxxxxxx/DPM/MatchNextPeer:    Result=Success(0); Incoming Dial-peer=1 Is Matched *Sep   9 17:15:47.132: //-1/xxxxxxxxxxxx/DPM/dpMatchPeertype:exit@5615 *Sep   9 17:15:47.132: //-1/xxxxxxxxxxxx/DPM/dpAssociateIncomingPeerCore:    Result=Success(0) after DP_MATCH_INCOMING_DNIS; Incoming Dial-peer=1 *Sep   9 17:15:47.132: //-1/xxxxxxxxxxxx/DPM/dpAssociateIncomingPeerSPI:exit@6169 *Sep   9 17:15:47.132: %LINK-3-UPDOWN: Interface Serial0/0/1:1, changed state to up *Sep   9 17:15:47.132: %ISDN-6-CONNECT: Interface Serial0/0/1:1 is now connected to 4087775100 N/A *Sep   9 17:15:47.136: ISDN Se0/0/1:23 Q931: TX -> CALL_PROC pd = 8   callref = 0x947A             Channel ID i = 0xA98382                         Exclusive, Channel 2 *Sep   9 17:15:47.136: ISDN Se0/0/1:23 Q931: TX -> CONNECT pd = 8   callref = 0x947A             Channel ID i = 0xA98382                         Exclusive, Channel 2 *Sep   9 17:15:47.136: Se0/0/1:1 PPP: Using dialer call direction *Sep   9 17:15:47.136: Se0/0/1:1 PPP: Treating connection as a callin *Sep   9 17:15:47.136: Se0/0/1:1 PPP: Session handle[4B00007D] Session id[31] *Sep   9 17:15:47.136: Se0/0/1:1 PPP: Phase is ESTABLISHING, Passive Open *Sep   9 17:15:47.136: Se0/0/1:1 LCP: State is Listen 3845-1# *Sep   9 17:15:47.144: ISDN Se0/0/1:23 Q931: RX <- CONNECT_ACK pd = 8   callref = 0x147A *Sep   9 17:15:47.320: Se0/0/1:1 LCP: I CONFREQ [Listen] id 8 len 22 *Sep   9 17:15:47.320: Se0/0/1:1 LCP:     MagicNumber 0x36FA5CCC (0x050636FA5CCC) *Sep   9 17:15:47.320: Se0/0/1:1 LCP:     MRRU 1524 (0x110405F4) *Sep   9 17:15:47.320: Se0/0/1:1 LCP:     EndpointDisc 1 Param (0x130801506172616D) *Sep   9 17:15:47.320: Se0/0/1:1 PPP: Authorization required *Sep   9 17:15:47.320: Se0/0/1:1 LCP: O CONFREQ [Listen] id 2 len 28 *Sep   9 17:15:47.320: Se0/0/1:1 LCP:     AuthProto CHAP (0x0305C22305) *Sep   9 17:15:47.320: Se0/0/1:1 LCP:     MagicNumber 0x4818A8F9 (0x05064818A8F9) *Sep   9 17:15:47.320: Se0/0/1:1 LCP:     MRRU 1524 (0x110405F4) *Sep   9 17:15:47.320: Se0/0/1:1 LCP:     EndpointDisc 1 3845-1 (0x130901333834352D31) *Sep   9 17:15:47.320: Se0/0/1:1 LCP: O CONFACK [Listen] id 8 len 22 *Sep   9 17:15:47.320: Se0/0/1:1 LCP:     MagicNumber 0x36FA5CCC (0x050636FA5CCC) *Sep   9 17:15:47.320: Se0/0/1:1 LCP:     MRRU 1524 (0x110405F4) *Sep   9 17:15:47.320: Se0/0/1:1 LCP:     EndpointDisc 1 Param (0x130801506172616D) *Sep   9 17:15:47.336: Se0/0/1:1 LCP: I CONFACK [ACKsent] id 2 len 28 *Sep   9 17:15:47.336: Se0/0/1:1 LCP:     AuthProto CHAP (0x0305C22305) *Sep   9 17:15:47.336: Se0/0/1:1 LCP:     MagicNumber 0x4818A8F9 (0x05064818A8F9) *Sep   9 17:15:47.336: Se0/0/1:1 LCP:     MRRU 1524 (0x110405F4) *Sep   9 17:15:47.336: Se0/0/1:1 LCP:     EndpointDisc 1 3845-1 (0x130901333834352D31) *Sep   9 17:15:47.336: Se0/0/1:1 LCP: State is Open *Sep   9 17:15:47.336: Se0/0/1:1 PPP: Phase is AUTHENTICATING, by this end *Sep   9 17:15:47.336: Se0/0/1:1 CHAP: O CHALLENGE id 2 len 27 from "3845-1" *Sep   9 17:15:47.356: Se0/0/1:1 CHAP: I RESPONSE id 2 len 26 from "Param" *Sep   9 17:15:47.356: Se0/0/1:1 PPP: Phase is FORWARDING, Attempting Forward *Sep   9 17:15:47.356: Se0/0/1:1 PPP: Phase is AUTHENTICATING, Unauthenticated User *Sep   9 17:15:47.356: Se0/0/1:1 PPP: Sent CHAP LOGIN Request 3845-1# *Sep   9 17:15:47.356: Se0/0/1:1 PPP: Received LOGIN Response PASS *Sep   9 17:15:47.356: Se0/0/1:1 PPP: Phase is FORWARDING, Attempting Forward *Sep   9 17:15:47.356: Se0/0/1:1 PPP: Phase is AUTHENTICATING, Authenticated User *Sep   9 17:15:47.356: Se0/0/1:1 PPP: Sent LCP AUTHOR Request *Sep   9 17:15:47.356: Se0/0/1:1 LCP: Received AAA AUTHOR Response PASS *Sep   9 17:15:47.356: Se0/0/1:1 CHAP: O SUCCESS id 2 len 4 *Sep   9 17:15:47.356: Se0/0/1:1 PPP: Phase is VIRTUALIZED *Sep   9 17:15:47.356: Vi1 MLP: Added link Se0/0/1:1 to bundle Param *Sep   9 17:15:47.356: Se0/0/1:1 PPP: Process pending ncp packets *Sep   9 17:15:48.356: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/1:1, changed state to up 3845-1# 3845-1#sh users     Line        User        Host(s)               Idle        Location    0 con 0                 1.1.1.1                   1w1d   tty 0/514                idle                      1w1d 1.1.1.1 *706 vty 0                 idle                  00:00:00 171.69.89.61   Interface     User                Mode          Idle      Peer Address   Vi1           Param               MLP Bundle    00:00:16 100.1.1.7   Se0/0/1:0     Param               Sync PPP      -         Bundle: Vi1   Se0/0/1:1     Param               Sync PPP      -         Bundle: Vi1 3845-1#sh caller timeout   Line            User                Limit      Remaining Timer Type   con 0           -                   -          -          -            tty 0/514       -                   -          -          -            vty 706         -                   01:00:00   00:59:59   Idle Exec   Se0/0/1:0       Param               -          -          -            Se0/0/1:1       Param               -          -          -            Vi1             Param               00:10:00   00:09:40   Dialer idle 3845-1#sh ppp multilink Virtual-Access1   Bundle name: Param   Remote Username: Param   Remote Endpoint Discriminator: [1] Param   Local Username: 3845-1   Local Endpoint Discriminator: [1] 3845-1   Bundle up for 00:01:32, total bandwidth 128, load 1/255   Receive buffer limit 24384 bytes, frag timeout 1524 ms   Dialer interface is Serial0/0/1:23     0/0 fragments/bytes in reassembly list     0 lost fragments, 1 reordered     0/0 discarded fragments/bytes, 0 lost received     0x2 received sequence, 0x0 sent sequence   Member links: 2 (max not set, min not set)     Se0/0/1:0, since 00:01:32     Se0/0/1:1, since 00:00:26 No inactive multilink interfaces 3845-1#sh int virtual-access 1 Virtual-Access1 is up, line protocol is up   Hardware is Virtual Access interface   MTU 1500 bytes, BW 128 Kbit/sec, DLY 20000 usec,      reliability 255/255, txload 1/255, rxload 1/255   Encapsulation PPP, LCP Open, multilink Open   Open: IPCP, CDPCP   MLP Bundle vaccess, cloned from Serial0/0/1:23   Vaccess status 0x40, loopback not set   Keepalive set (10 sec)   DTR is pulsed for 5 seconds on reset   Time to interface disconnect: idle 00:09:26   Last input 00:00:31, output never, output hang never   Last clearing of "show interface" counters 5d18h   Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0   Queueing strategy: weighted fair   Output queue: 0/1000/64/0 (size/max total/threshold/drops)      Conversations   0/1/256 (active/max active/max total)      Reserved Conversations 0/0 (allocated/max allocated)      Available Bandwidth 96 kilobits/sec   5 minute input rate 0 bits/sec, 0 packets/sec   5 minute output rate 0 bits/sec, 0 packets/sec      117 packets input, 12384 bytes, 0 no buffer      Received 0 broadcasts, 0 runts, 0 giants, 0 throttles      0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort      116 packets output, 11752 bytes, 0 underruns      0 output errors, 0 collisions, 0 interface resets      0 unknown protocol drops      0 output buffer failures, 0 output buffers swapped out      0 carrier transitions 3845-1#sh dialer map Dynamic dialer map ip 100.1.1.7    name Param      () on Se0/0/1:23 3845-1#sh caller user Param detail   User: Param, line Se0/0/1:0, service PPP         Connected for 00:02:06, Idle for 00:00:58   Timeouts:     Limit      Remaining Timer Type                -          -          -            PPP: LCP Open, multilink Open, CHAP (<-)   LCP: -> peer, AuthProto, MagicNumber, MRRU, EndpointDisc        <- peer, MagicNumber, MRRU, EndpointDisc   NCP: Closed IPCP, CDPCP   Dialer: Connected to 4087775100, inbound           Type is ISDN, group Se0/0/1:23   IP: Local 100.1.1.1   Bundle: Member of Param   Counts: 209 packets input, 18576 bytes, 0 no buffer           1 input errors, 1 CRC, 0 frame, 0 overrun           210 packets output, 17789 bytes, 0 underruns           0 output errors, 0 collisions, 0 interface resets   User: Param, line Se0/0/1:1, service PPP         Connected for 00:00:59, Idle for 00:00:58   Timeouts:     Limit      Remaining Timer Type                -          -          -            PPP: LCP Open, multilink Open, CHAP (<-)   LCP: -> peer, AuthProto, MagicNumber, MRRU, EndpointDisc        <- peer, MagicNumber, MRRU, EndpointDisc   Dialer: Connected to 4087775100, inbound           Type is ISDN, group Se0/0/1:23   IP: Local 100.1.1.1   Bundle: Member of Param   Counts: 28 packets input, 1932 bytes, 0 no buffer           0 input errors, 0 CRC, 0 frame, 0 overrun           30 packets output, 1687 bytes, 0 underruns           0 output errors, 0 collisions, 0 interface resets   User: Param, line Vi1, service MLP Bundle         Connected for 00:02:06, Idle for 00:01:00   Timeouts:     Limit      Remaining Timer Type                00:10:00   00:08:59   Dialer idle   PPP: LCP Open, multilink Open, IPCP, CDPCP   LCP: -> peer        <- peer   NCP: Open IPCP, CDPCP   IPCP: <- peer, Address         -> peer, Address   Dialer: Connected to 4087775100, inbound           Type is IN-BAND SYNC, group Se0/0/1:23   IP: Local 100.1.1.1, remote 100.1.1.7   Bundle: Bundle Param, 2 links   Counts: 117 packets input, 12384 bytes, 0 no buffer           0 input errors, 0 CRC, 0 frame, 0 overrun           117 packets output, 12116 bytes, 0 underruns           0 output errors, 0 collisions, 0 interface resets 3845-1#show isdn status <snip> ISDN Serial0/1/0:23 interface         dsl 1, interface ISDN Switchtype = primary-5ess     Layer 1 Status:         DEACTIVATED     Layer 2 Status:         TEI = 0, Ces = 1, SAPI = 0, State = TEI_ASSIGNED     Layer 3 Status:         0 Active Layer 3 Call(s)     Active dsl 1 CCBs = 0     The Free Channel Mask:   0x00000000     Number of L2 Discards = 0, L2 Session ID = 0 ISDN Serial0/0/1:23 interface         dsl 2, interface ISDN Switchtype = primary-5ess     Layer 1 Status:         ACTIVE     Layer 2 Status:         TEI = 0, Ces = 1, SAPI = 0, State = MULTIPLE_FRAME_ESTABLISHED     Layer 3 Status:         2 Active Layer 3 Call(s)         CCB:callid=16, sapi=0, ces=0, B-chan=1, calltype=DATA, hdlctype=HDLC-TRUNK         CCB:callid=17, sapi=0, ces=0, B-chan=2, calltype=DATA, hdlctype=HDLC-TRUNK     Active dsl 2 CCBs = 2     The Free Channel Mask:   0x807FFFFC     Number of L2 Discards = 0, L2 Session ID = 3     Total Allocated ISDN CCBs = 2 ... View more

Configuring and Troubleshooting an Integrated Service Routers ( ISRs) with PRIs for Incoming Multilink Async and ISDN Calls Contents Introduction Now we all know that ISRs are becoming more and more popular for customer deployments. In many environments, customer need to configure an ISRs that can accept incoming calls from both Async and ISDN users. Such a setup is commonly used to provide network connectivity to users who travel and are telecommuters, and also for Small Office-Home Office (SOHO) sites. As we all know that many customers are migrating from their old NM-xCTE1-PRI modules to HWICs and VWICs because NM-xCTE1-PRI modules are End-Of-Sale as of December 29, 2008. Pl. visit following url for EOS announcements and migration path. https://www.cisco.com/en/US/prod/collateral/routers/ps5855/eol_c51_484362.html That said, HWICs are the perfect replacements for old NMs for data calls.   This document describes how to configure an Access Server to accept incoming Async and ISDN calls on ISDN T1 PRI circuits. The configuration provides the minimum setup required for the Integrated Service Routers ( ISRs) to accept the call. You can add additional features to this configuration based on your needs. Prerequisites Requirements There are no specific requirements for this document. Components Used The information in this document is based on these software and hardware versions: ·        Cisco ISR router 3845 with HWIC-2CE1T1-PRI and PVDM2-24DM digital modem module. ·        One T1 PRI. ·        A PC that runs Microsoft Windows. This PC has an analog modem and a phone connection to the Public Switch Telephone Network. The PC dials the T1 PRI that is connected to the ISR 3845. ·        Cisco 1800 or 2800 ISR series routers with ISDN BRI circuits. These routers are the ISDN mlppp dialin clients. You can apply this client configuration to any router with a BRI interface. Client side configuration is not the intended purpose of this document. ·        Local Authentication, Authorization and Accounting (AAA). If you have a AAA Radius or Tacacs+ Server, you can use either of them to provide AAA for the incoming calls. Refer to Implementing the Server-Based AAA Subsystem for more information. Note: The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command. Configure In this section, you are presented with the information to configure the features described in this document. Note: To find additional information on the commands used in this document, use the Command Lookup Tool ( registered customers only ) . Network Diagram This document uses this network setup: On Cisco 3845-1, HWIC-2CE1T1-PRI modules is in WIC slot 2 and PVDM2-24DM digital modems are in PVDM 1 slot. “Show diag” command will look like following PVDM Slot 1:                     24 port PVDMII digital modem PVDM daughter card             Hardware Revision         : 2.0             Part Number               : 73-10101-03             Board Revision            : 02             Deviation Number          : 0-0             Fab Version               : 02             PCB Serial Number         : FHH10100018             RMA Test History          : 00             RMA Number                : 0-0-0-0             RMA History               : 00             Processor type            : 00             Product (FRU) Number      : PVDM2-24DM WIC Slot 2:             2 port channelized and PRI T1/E1 HWIC             Hardware Revision         : 0.0             Top Assy. Part Number     : 800-27137-02             Part Number               : 73-10363-03             Board Revision            : A0             Deviation Number          : 88300             Fab Version               : 03             PCB Serial Number         : FOC110300X6             RMA Test History          : 00             RMA Number                : 0-0-0-0             RMA History               : 00             Version Identifier        : V01             Product (FRU) Number      : HWIC-2CE1T1-PRI 3845-1#sh run Building configuration... Current configuration : 3746 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname 3845-1 ! boot-start-marker boot-end-marker ! card type t1 0 2 !---Need to define a card type about the use of HWIC-2TE1-PRI card to be a T1 card or a !---E1 card. Here we are using it as a T1 card. logging message-counter syslog logging buffered 65535 enable secret 5 $1$clc3$GfelyWY1QQs6bCR4lxwl.. ! no aaa new-model network-clock-participate wic 0 !--- Allow other WICs modules to drive the clock from the selected T1 line network-clock-select 1 T1 0/2/0 !---Need to select proper T1 line to source the clock from. dot11 syslog ip source-route ip cef ! no ip domain lookup no ipv6 cef ! multilink bundle-name authenticated !---Configure multilink bundle name based on the authenticated username isdn switch-type primary-5ess !--- Switch-type for the PRI circuit. Obtain this information from the Telco. ! username Param password mypassword username Preet password 0 nosecretatall !--- Usernames for local authentication of the call.   !--- The client presents the username/password and the ISR !--- authenticates the peer. archive log config   hidekeys ! controller T1 0/2/0 cablelength long 0db pri-group timeslots 1-24 !--- For T1 PRI scenarios, all 24 T1 timeslots are assigned as    !--- ISDN PRI channels. The router now automatically creates the    !--- corresponding D-channel: interface Serial 0/2/0:23. !--- Framing for this T1 is Extended Super Frame (ESF) and linecode is !--- B8ZS is default. Obtain these information from the Telco. controller T1 0/2/1 cablelength long 0db pri-group timeslots 1-24 !--- For T1 PRI scenarios, all 24 T1 timeslots are assigned as    !--- ISDN PRI channels. The router now automatically creates the    !--- corresponding D-channel: interface Serial 0/2/1:23. !--- Framing for this T1 is Extended Super Frame (ESF) and linecode is !--- B8ZS is default. Obtain these information from the Telco. interface Loopback1 ip address 100.1.1.1 255.255.255.0 !--- The IP pool for ISDN users is in this subnet.   !--- The routes for all ISDN clients are summarized and    !--- propagated to the backbone instead of 254 routes. interface GigabitEthernet0/0 ip address 100.2.1.1 255.255.255.0 duplex auto speed auto media-type rj45 !--- Unused interface configuration is omitted here. interface GigabitEthernet0/1 no ip address shutdown !--- Unused interface configuration is omitted here. interface Serial0/2/0:23 !--- D-channel configuration for T1 0/2/0. ip unnumbered Loopback1             !--- A Loopback interface is always up/up. So, unnumber the Loopback !--- interface for stability. encapsulation ppp dialer idle-timeout 600 either !--- Idle Timeout is defined as 600 secs which is 10 mins.   dialer-group 1 !--- Interesting traffic is defined in dialer-list 1.   !--- Note: The specified dialer-group number must be the same as the    !--- dialer-list number. In this example, the number is defined as "1". isdn switch-type primary-5ess isdn incoming-voice modem !--- All incoming voice calls on this T1 are sent to the modems.   !--- This command is required if this T1 is to accept async modem calls. peer default ip address pool My-IP !--- Clients are assigned addresses from the IP address pool named My-IP which needs to be configured later in the config. ppp authentication chap callin !--- Use CHAP authentication. ppp multilink !--- Configure the interface to use multilink. !--- Without this command multilink is NOT negotiated. !--- This command is needed to bind more than one calls from the same !--- user together. ! interface Serial0/2/1:23 ip unnumbered Loopback1 encapsulation ppp dialer idle-timeout 600 either dialer-group 1 isdn switch-type primary-5ess isdn incoming-voice modem peer default ip address pool My-IP ppp authentication chap callin ppp multilink ! interface Group-Async1             !--- This group-async interface is the configuration template for all !--- modems.   You need not configure individual async interfaces !--- because you can clone the interfaces from one managed copy. ip unnumbered Loopback1 !--- A Loopback interface is always up/up. So, unnumber the Loopback !--- interface for stability. encapsulation ppp dialer in-band dialer idle-timeout 300 either !--- Idle Timeout is defined as 300 secs which is 5 mins.   dialer-group 1 !--- Interesting traffic is defined in dialer-list 1.   !--- Note: The specified dialer-group number must be the same as the    !--- dialer-list number. In this example, the number is defined as "1". async mode dedicated peer default ip address pool My-IP !--- Clients are assigned addresses from the IP address pool named !--- My-IP which needs to be configured later in the config. ppp authentication chap callin !--- Use CHAP authentication. ppp multilink !--- Configure the interface to use multilink. !--- Without this command multilink is NOT negotiated. !--- This command is needed to bind more than one calls from the same !--- user together. group-range 0/514 0/537 !--- Modems 0/514 through 0/537 are members of this group async !--- interface ! ip local pool My-IP 100.1.1.2 100.1.1.100 !--- IP address pools for dialin clients. ip route 0.0.0.0 0.0.0.0 100.2.1.2 ip http server no ip http secure-server !             dialer-list 1 protocol ip permit ! control-plane ! ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 privilege level 15 password cisco login line 0/514 0/537 modem InOut   !--- Support incoming and outgoing modem calls.    transport input all    autoselect during-login   ! ---   Displays the username:password prompt after modems connect.   autoselect ppp   !--- Automatically launches PPP if the router detects incoming PPP !--- packets. Without this command the dialin client must manually    !--- launch PPP (from Exec mode). line vty 0 4 exec-timeout 60 0 privilege level 15 password cisco login line vty 5 10 exec-timeout 60 0 privilege level 15 password cisco login ! scheduler allocate 20000 1000 end 3845-1#   Verify This section provides information you can use to confirm your configuration is working properly. Certain show commands are supported by the Output Interpreter Tool ( registered customers only ) , which allows you to view an analysis of show command output. ·        Show network-clocks -- The network clock source must be derived from an external source, for example, PSTN, or PBX. To display the current configured and active network clock sources, use the show network-clocks command ·        show isdn status—ensures that the router communicates properly with the ISDN switch. In the output, ensure that Layer 1 Status is ACTIVE , and that the Layer 2 Status state = MULTIPLE_FRAME_ESTABLISHED appears. This command also displays the number of active calls. ·        show ppp multilink—displays information on active multilink bundles. Use this command to verify the multilink connection. ·        show dialer [interface type number]—displays general diagnostic information for interfaces configured for DDR. If the dialer comes up properly, the Dialer state is data link layer up message must appear. If physical layer up appears, the implication is that line protocol came up, but the Network Control Protocol (NCP) did not. The source and destination addresses of the packet that initiated the dialing are shown in the Dial reason line. This show command also displays the configuration of the timer, and the time before the connection times out. ·        show caller user username detail—shows parameters for the particular user, for example, the IP address assigned, PPP and PPP bundle parameters. If your version of the Cisco IOS software does not support this command, use the show user command. ·        show dialer map—displays configured dynamic and static dialer maps. You can use this command to check whether a dynamic dialer map is created. You cannot route packets without a dialer map. 3845-1#show network-clocks   Network Clock Configuration   ---------------------------   Priority       Clock Source     Clock State      Clock Type      1           T1 0/2/0         GOOD             T1           !--- The clock is derived from primary T1 line in 0/2/0     11           Backplane        GOOD             PLL            Current Primary Clock Source   ---------------------------   Priority       Clock Source     Clock State      Clock Type      1           T1 0/2/0         GOOD             T1 3845-1#sh isdn stats Global ISDN Switchtype = primary-5ess ISDN Serial0/2/0:23 interface         dsl 0, interface ISDN Switchtype = primary-5ess     Layer 1 Status:         ACTIVE     Layer 2 Status:         TEI = 0, Ces = 1, SAPI = 0, State = MULTIPLE_FRAME_ESTABLISHED    Layer 3 Status:         0 Active Layer 3 Call(s)     Active dsl 0 CCBs = 0     The Free Channel Mask:   0x807FFFFF     Number of L2 Discards = 0, L2 Session ID = 5 Troubleshooting Commands Certain show commands are supported by the Output Interpreter Tool ( registered customers only ) , which allows you to view an analysis of show command output. Note: Before issuing debug commands, please see Important Information on Debug Commands. ·        debug dialer—displays DDR debugging information about the packets received on a dialer interface. This information can help to ensure there is interesting traffic that uses the dialer interface. ·        debug isdn q931—shows call setup and tear down of the ISDN network connection (Layer 3). ·        debug modem—displays modem line activity on an access server. The output displays when the modem line changes state. ·        debug modem csm—enables you to troubleshoot Call Switching Module (CSM) problems on routers with internal digital modems. With this command, you can trace the complete sequence of switching incoming and outgoing calls. ·        debug ppp negotiation—displays information on the PPP traffic and exchanges, and negotiates Link Control Protocol (LCP), Authentication, and Network Control Protocol (NCP). A successful PPP negotiation first opens the LCP state, then authenticates, and finally negotiates NCP. Multilink Parameters such as Maximum Receive Reconstructed Unit (MRRU) are established during LCP negotiation. ·        debug ppp authentication—displays PPP authentication protocol messages, including CHAP packet exchanges and Password Authentication Protocol (PAP) exchanges. ·        debug ppp error—displays protocol errors and error statistics associated with PPP connection negotiation and operation. Sample debug Output For mlppp ISDN Call A)first call from the client is received 3845-1# *Sep   3 20:47:50.958: ISDN Se0/2/0:23 Q931: RX <- SETUP pd = 8   callref = 0x13EF !--- Incoming Q.931 Setup message.         Bearer Capability i = 0x8890                 Standard = CCITT                 Transfer Capability = Unrestricted Digital                 Transfer Mode = Circuit                 Transfer Rate = 64 kbit/s         Channel ID i = 0xA98381                 Exclusive, Channel 1         Calling Party Number i = 0x2180, '4087775100'                 Plan:ISDN, Type:National         Called Party Number i = 0x80, '83115'                 Plan:Unknown, Type:Unknown *Sep   3 20:47:50.958: ISDN Se0/2/0:23 Q931: Received SETUP   callref = 0x93EF callID = 0x000B switch = primary-5ess interface = User *Sep   3 20:47:50.958: %LINK-3-UPDOWN: Interface Serial0/2/0:0, changed state to up *Sep   3 20:47:50.958: %ISDN-6-CONNECT: Interface Serial0/2/0:0 is now connected to 4087775100 N/A *Sep   3 20:47:50.962: ISDN Se0/2/0:23 Q931: TX -> CALL_PROC pd = 8   callref = 0x93EF         Channel ID i = 0xA98381                 Exclusive, Channel 1 *Sep   3 20:47:50.962: ISDN Se0/2/0:23 Q931: TX -> CONNECT pd = 8   callref = 0x93EF         Channel ID i = 0xA98381                 Exclusive, Channel 1 *Sep   3 20:47:50.962: Se0/2/0:0 PPP: Using dialer call direction *Sep   3 20:47:50.962: Se0/2/0:0 PPP: Treating connection as a callin *Sep   3 20:47:50.962: Se0/2/0:0 PPP: Session handle[2F000086] Session id[9] *Sep   3 20:47:50.962: Se0/2/0:0 PPP: Phase is ESTABLISHING, Passive Open *Sep   3 20:47:50.962: Se0/2/0:0 LCP: State is Listen *Sep   3 20:47:50.970: ISDN Se0/2/0:23 Q931: RX <- CONNECT_ACK pd = 8   callref = 0x13EF !--- Call is connected. *Sep   3 20:47:51.126: Se0/2/0:0 LCP: I CONFREQ [Listen] id 6 len 22 *Sep   3 20:47:51.126: Se0/2/0:0 LCP:     MagicNumber 0x18D6525F (0x050618D6525F) *Sep   3 20:47:51.126: Se0/2/0:0 LCP:     MRRU 1524 (0x110405F4) *Sep   3 20:47:51.126: Se0/2/0:0 LCP:     EndpointDisc 1 Preet (0x1308015072656574) *Sep   3 20:47:51.126: Se0/2/0:0 PPP: Authorization required *Sep   3 20:47:51.126: Se0/2/0:0 LCP: O CONFREQ [Listen] id 3 len 28 *Sep   3 20:47:51.126: Se0/2/0:0 LCP:     AuthProto CHAP (0x0305C22305) *Sep   3 20:47:51.126: Se0/2/0:0 LCP:     MagicNumber 0x29F4A718 (0x050629F4A718) *Sep   3 20:47:51.126: Se0/2/0:0 LCP:     MRRU 1524 (0x110405F4) *Sep   3 20:47:51.126: Se0/2/0:0 LCP:     EndpointDisc 1 3845-1 (0x130901333834352D31) *Sep   3 20:47:51.126: Se0/2/0:0 LCP: O CONFACK [Listen] id 6 len 22 *Sep   3 20:47:51.126: Se0/2/0:0 LCP:     MagicNumber 0x18D6525F (0x050618D6525F) *Sep   3 20:47:51.126: Se0/2/0:0 LCP:     MRRU 1524 (0x110405F4) *Sep   3 20:47:51.126: Se0/2/0:0 LCP:     EndpointDisc 1 Preet (0x1308015072656574) *Sep   3 20:47:51.146: Se0/2/0:0 LCP: I CONFACK [ACKsent] id 3 len 28 *Sep   3 20:47:51.146: Se0/2/0:0 LCP:     AuthProto CHAP (0x0305C22305) *Sep   3 20:47:51.146: Se0/2/0:0 LCP:     MagicNumber 0x29F4A718 (0x050629F4A718) *Sep   3 20:47:51.146: Se0/2/0:0 LCP:     MRRU 1524 (0x110405F4) *Sep   3 20:47:51.146: Se0/2/0:0 LCP:     EndpointDisc 1 3845-1 (0x130901333834352D31) *Sep   3 20:47:51.146: Se0/2/0:0 LCP: State is Open !--- LCP negotiation is complete. *Sep   3 20:47:51.146: Se0/2/0:0 PPP: Phase is AUTHENTICATING, by this end *Sep   3 20:47:51.146: Se0/2/0:0 CHAP: O CHALLENGE id 1 len 27 from "3845-1" *Sep   3 20:47:51.166: Se0/2/0:0 CHAP: I RESPONSE id 1 len 26 from "Preet" *Sep   3 20:47:51.166: Se0/2/0:0 PPP: Phase is FORWARDING, Attempting Forward *Sep   3 20:47:51.166: Se0/2/0:0 PPP: Phase is AUTHENTICATING, Unauthenticated User *Sep   3 20:47:51.166: Se0/2/0:0 PPP: Sent CHAP LOGIN Request *Sep   3 20:47:51.166: Se0/2/0:0 PPP: Received LOGIN Response PASS *Sep   3 20:47:51.166: Se0/2/0:0 PPP: Phase is FORWARDING, Attempting Forward *Sep   3 20:47:51.166: Se0/2/0:0 PPP: Phase is AUTHENTICATING, Authenticated User *Sep   3 20:47:51.166: Se0/2/0:0 PPP: Sent LCP AUTHOR Request *Sep   3 20:47:51.166: Se0/2/0:0 PPP: Sent MLP AUTHOR Request *Sep   3 20:47:51.166: Se0/2/0:0 PPP: Sent IPCP AUTHOR Request *Sep   3 20:47:51.166: Se0/2/0:0 LCP: Received AAA AUTHOR Response PASS *Sep   3 20:47:51.166: Se0/2/0:0 MLP: Received AAA AUTHOR Response PASS *Sep   3 20:47:51.166: Se0/2/0:0 IPCP: Received AAA AUTHOR Response PASS *Sep   3 20:47:51.166: Se0/2/0:0 CHAP: O SUCCESS id 1 len 4 !--- PPP CHAP authentication is successful. *Sep   3 20:47:51.166: Se0/2/0:0 PPP: Phase is VIRTUALIZED *Sep   3 20:47:51.174: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up !--- Virtual-Access Interface is up.        !--- This interface controls the incoming call. *Sep   3 20:47:51.174: Vi1 MLP: Added first link Se0/2/0:0 to bundle Preet *Sep   3 20:47:51.174: Vi1 PPP: Phase is DOWN, Setup *Sep   3 20:47:51.174: Vi1 PPP: Phase is UP *Sep   3 20:47:51.174: Vi1 IPCP: O CONFREQ [Closed] id 1 len 10 *Sep   3 20:47:51.174: Vi1 IPCP:     Address 100.1.1.1 (0x030664010101) *Sep   3 20:47:51.174: Vi1 PPP: Sent CDPCP AUTHOR Request *Sep   3 20:47:51.174: Vi1 PPP: Process pending ncp packets *Sep   3 20:47:51.174: Se0/2/0:0 PPP: Process pending ncp packets *Sep   3 20:47:51.174: Se0/2/0:0 PPP: Process pending ncp packets *Sep   3 20:47:51.174: Vi1 CDPCP: Received AAA AUTHOR Response PASS *Sep   3 20:47:51.174: Vi1 CDPCP: O CONFREQ [Closed] id 1 len 4 *Sep   3 20:47:51.186: Vi1 IPCP: I CONFREQ [REQsent] id 1 len 10 *Sep   3 20:47:51.186: Vi1 IPCP:     Address 0.0.0.0 (0x030600000000) *Sep   3 20:47:51.186: Vi1 AAA/AUTHOR/IPCP: Start.   Her address 0.0.0.0, we want 0.0.0.0 *Sep   3 20:47:51.186: Vi1 AAA/AUTHOR/IPCP: Done.   Her address 0.0.0.0, we want 0.0.0.0 *Sep   3 20:47:51.186: Vi1 IPCP: Pool returned 100.1.1.6 !--- Peer IP address is assigned from IP Pool named "My-IP". *Sep   3 20:47:51.186: Vi1 IPCP: O CONFNAK [REQsent] id 1 len 10 *Sep   3 20:47:51.186: Vi1 IPCP:     Address 100.1.1.6 (0x030664010106) *Sep   3 20:47:51.186: Vi1 CDPCP: I CONFREQ [REQsent] id 1 len 4 *Sep   3 20:47:51.186: Vi1 CDPCP: O CONFACK [REQsent] id 1 len 4 *Sep   3 20:47:51.186: Vi1 IPCP: I CONFACK [REQsent] id 1 len 10 *Sep   3 20:47:51.186: Vi1 IPCP:     Address 100.1.1.1 (0x030664010101) *Sep   3 20:47:51.190: Vi1 CDPCP: I CONFACK [ACKsent] id 1 len 4 *Sep   3 20:47:51.190: Vi1 CDPCP: State is Open *Sep   3 20:47:51.198: Vi1 IPCP: I CONFREQ [ACKrcvd] id 2 len 10 *Sep   3 20:47:51.198: Vi1 IPCP:     Address 100.1.1.6 (0x030664010106) *Sep   3 20:47:51.198: Vi1 IPCP: O CONFACK [ACKrcvd] id 2 len 10 *Sep   3 20:47:51.198: Vi1 IPCP:     Address 100.1.1.6 (0x030664010106) *Sep   3 20:47:51.198: Vi1 IPCP: State is Open !--- IPCP negotiation is complete. The call is now connected. *Sep   3 20:47:51.198: Se0/2/0:23 IPCP: Install route to 100.1.1.6 !--- IPCP Route for client is installed in the routing table. 3845-1# *Sep   3 20:47:51.202: Vi1 IPCP: Add link info for cef entry 100.1.1.6 3845-1# *Sep   3 20:47:52.166: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/2/0:0, changed state to up *Sep   3 20:47:52.174: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access1, changed state to up 3845-1# 3845-1# 3845-1# 3845-1#sh users     Line        User        Host(s)               Idle        Location    0 con 0                 1.1.1.1                  2d20h   tty 0/514                idle                     2d20h 1.1.1.1 *706 vty 0                 idle                  00:00:00 171.69.89.61   Interface     User                Mode          Idle      Peer Address   Vi1           Preet               MLP Bundle    00:00:07 100.1.1.6   Se0/2/0:0     Preet               Sync PPP      -         Bundle: Vi1 !--- Virtual-Access Interface will be created for each multilink PPP users. 3845-1# 3845-1#sh caller timeouts   Line            User                Limit      Remaining Timer Type   con 0           -                   -          -          -            tty 0/514       -                   -          -          -            vty 706         -                   01:00:00   00:59:59   Idle Exec   Se0/2/0:0       Preet               -          -          -            Vi1             Preet               00:10:00   00:09:16   Dialer idle 3845-1#             B)Second call from the same client is received 3845-1# *Sep   3 20:48:53.914: ISDN Se0/2/0:23 Q931: RX <- SETUP pd = 8   callref = 0x13F0 !--- The second link in the multilink connection arrives.         Bearer Capability i = 0x8890                 Standard = CCITT                 Transfer Capability = Unrestricted Digital                 Transfer Mode = Circuit                 Transfer Rate = 64 kbit/s         Channel ID i = 0xA98382                 Exclusive, Channel 2         Calling Party Number i = 0x2180, '4087775100'                 Plan:ISDN, Type:National         Called Party Number i = 0x80, '83115'                 Plan:Unknown, Type:Unknown *Sep   3 20:48:53.914: ISDN Se0/2/0:23 Q931: Received SETUP   callref = 0x93F0 callID = 0x000C switch = primary-5ess interface = User *Sep   3 20:48:53.918: %LINK-3-UPDOWN: Interface Serial0/2/0:1, changed state to up *Sep   3 20:48:53.918: %ISDN-6-CONNECT: Interface Serial0/2/0:1 is now connected to 4087775100 N/A *Sep   3 20:48:53.918: ISDN Se0/2/0:23 Q931: TX -> CALL_PROC pd = 8   callref = 0x93F0         Channel ID i = 0xA98382                 Exclusive, Channel 2 *Sep   3 20:48:53.918: ISDN Se0/2/0:23 Q931: TX -> CONNECT pd = 8   callref = 0x93F0         Channel ID i = 0xA98382                 Exclusive, Channel 2 *Sep   3 20:48:53.918: Se0/2/0:1 PPP: Using dialer call direction *Sep   3 20:48:53.918: Se0/2/0:1 PPP: Treating connection as a callin *Sep   3 20:48:53.918: Se0/2/0:1 PPP: Session handle[64000087] Session id[11] *Sep   3 20:48:53.918: Se0/2/0:1 PPP: Phase is ESTABLISHING, Passive Open *Sep   3 20:48:53.918: Se0/2/0:1 LCP: State is Listen *Sep   3 20:48:53.930: ISDN Se0/2/0:23 Q931: RX <- CONNECT_ACK pd = 8   callref = 0x13F0 *Sep   3 20:48:54.126: Se0/2/0:1 LCP: I CONFREQ [Listen] id 4 len 22 *Sep   3 20:48:54.126: Se0/2/0:1 LCP:     MagicNumber 0x18D7487C (0x050618D7487C) *Sep   3 20:48:54.126: Se0/2/0:1 LCP:     MRRU 1524 (0x110405F4) *Sep   3 20:48:54.126: Se0/2/0:1 LCP:     EndpointDisc 1 Preet (0x1308015072656574) *Sep   3 20:48:54.126: Se0/2/0:1 PPP: Authorization required *Sep   3 20:48:54.126: Se0/2/0:1 LCP: O CONFREQ [Listen] id 2 len 28 *Sep   3 20:48:54.126: Se0/2/0:1 LCP:     AuthProto CHAP (0x0305C22305) *Sep   3 20:48:54.126: Se0/2/0:1 LCP:     MagicNumber 0x29F59D32 (0x050629F59D32) *Sep   3 20:48:54.126: Se0/2/0:1 LCP:     MRRU 1524 (0x110405F4) *Sep   3 20:48:54.130: Se0/2/0:1 LCP:     EndpointDisc 1 3845-1 (0x130901333834352D31) *Sep   3 20:48:54.130: Se0/2/0:1 LCP: O CONFACK [Listen] id 4 len 22 *Sep   3 20:48:54.130: Se0/2/0:1 LCP:     MagicNumber 0x18D7487C (0x050618D7487C) *Sep   3 20:48:54.130: Se0/2/0:1 LCP:     MRRU 1524 (0x110405F4) *Sep   3 20:48:54.130: Se0/2/0:1 LCP:     EndpointDisc 1 Preet (0x1308015072656574) *Sep   3 20:48:54.146: Se0/2/0:1 LCP: I CONFACK [ACKsent] id 2 len 28 *Sep   3 20:48:54.146: Se0/2/0:1 LCP:     AuthProto CHAP (0x0305C22305) *Sep   3 20:48:54.146: Se0/2/0:1 LCP:     MagicNumber 0x29F59D32 (0x050629F59D32) *Sep   3 20:48:54.146: Se0/2/0:1 LCP:     MRRU 1524 (0x110405F4) *Sep   3 20:48:54.146: Se0/2/0:1 LCP:     EndpointDisc 1 3845-1 (0x130901333834352D31) *Sep   3 20:48:54.146: Se0/2/0:1 LCP: State is Open *Sep   3 20:48:54.146: Se0/2/0:1 PPP: Phase is AUTHENTICATING, by this end *Sep   3 20:48:54.146: Se0/2/0:1 CHAP: O CHALLENGE id 1 len 27 from "3845-1" *Sep   3 20:48:54.166: Se0/2/0:1 CHAP: I RESPONSE id 1 len 26 from "Preet" *Sep   3 20:48:54.166: Se0/2/0:1 PPP: Phase is FORWARDING, Attempting Forward *Sep   3 20:48:54.166: Se0/2/0:1 PPP: Phase is AUTHENTICATING, Unauthenticated User *Sep   3 20:48:54.166: Se0/2/0:1 PPP: Sent CHAP LOGIN Request 3845-1# *Sep   3 20:48:54.166: Se0/2/0:1 PPP: Received LOGIN Response PASS *Sep   3 20:48:54.166: Se0/2/0:1 PPP: Phase is FORWARDING, Attempting Forward *Sep   3 20:48:54.166: Se0/2/0:1 PPP: Phase is AUTHENTICATING, Authenticated User *Sep   3 20:48:54.166: Se0/2/0:1 PPP: Sent LCP AUTHOR Request *Sep   3 20:48:54.166: Se0/2/0:1 LCP: Received AAA AUTHOR Response PASS *Sep   3 20:48:54.166: Se0/2/0:1 CHAP: O SUCCESS id 1 len 4 *Sep   3 20:48:54.166: Se0/2/0:1 PPP: Phase is VIRTUALIZED *Sep   3 20:48:54.166: Vi1 MLP: Added link Se0/2/0:1 to bundle Preet !--- An additional Link is now added to exiting Virtual Interface Bundle. *Sep   3 20:48:54.166: Se0/2/0:1 PPP: Process pending ncp packets *Sep   3 20:48:55.166: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/2/0:1, changed state to up !--- The second call is connected. The multilink Bundle is complete. 3845-1# 3845-1#show users     Line        User        Host(s)               Idle        Location    0 con 0                 1.1.1.1                  2d20h   tty 0/514                idle                     2d20h 1.1.1.1 *706 vty 0                 idle                  00:00:00 171.69.89.61   Interface     User                Mode          Idle      Peer Address   Vi1           Preet               MLP Bundle    00:00:06 100.1.1.6   Se0/2/0:0     Preet               Sync PPP      -         Bundle: Vi1   Se0/2/0:1     Preet               Sync PPP      -         Bundle: Vi1 !--- Virtual-Access 1 Interface is now the bundle interface of two !--- calls mlppp from user Preet. 3845-1#show caller timeouts   Line            User                Limit      Remaining Timer Type   con 0           -                   -          -          -            tty 0/514       -                   -          -          -            vty 706         -                   01:00:00   01:00:00   Idle Exec   Se0/2/0:0       Preet               -          -          -            Se0/2/0:1       Preet               -          -          -            Vi1             Preet               00:10:00   00:09:50   Dialer idle 3845-1#sh int virtual-access 1 Virtual-Access1 is up, line protocol is up   Hardware is Virtual Access interface   MTU 1500 bytes, BW 128 Kbit/sec, DLY 20000 usec,      reliability 255/255, txload 1/255, rxload 1/255   Encapsulation PPP, LCP Open, multilink Open   Open: IPCP, CDPCP   MLP Bundle vaccess, cloned from Serial0/2/0:23   Vaccess status 0x40, loopback not set   Keepalive set (10 sec)   DTR is pulsed for 5 seconds on reset   Time to interface disconnect: idle 00:09:38   Last input 00:00:21, output never, output hang never   Last clearing of "show interface" counters 00:34:39   Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0   Queueing strategy: weighted fair   Output queue: 0/1000/64/0 (size/max total/threshold/drops)      Conversations   0/1/256 (active/max active/max total)      Reserved Conversations 0/0 (allocated/max allocated)      Available Bandwidth 96 kilobits/sec   5 minute input rate 0 bits/sec, 0 packets/sec   5 minute output rate 0 bits/sec, 0 packets/sec      112 packets input, 12090 bytes, 0 no buffer      Received 0 broadcasts, 0 runts, 0 giants, 0 throttles      0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort      112 packets output, 12730 bytes, 0 underruns      0 output errors, 0 collisions, 0 interface resets      0 unknown protocol drops      0 output buffer failures, 0 output buffers swapped out      0 carrier transitions 3845-1# 3845-1#show dialer map Dynamic dialer map ip 100.1.1.6    name Preet      () on Se0/2/0:23 !--- Observe the Dynamic Dialer Maps created for each dialin client. 3845-1#show ppp multilink Virtual-Access1   Bundle name: Preet   Remote Username: Preet   Remote Endpoint Discriminator: [1] Preet   Local Username: 3845-1   Local Endpoint Discriminator: [1] 3845-1   Bundle up for 00:00:53, total bandwidth 128, load 5/255   Receive buffer limit 24384 bytes, frag timeout 1524 ms   Dialer interface is Serial0/2/0:23     0/0 fragments/bytes in reassembly list     0 lost fragments, 0 reordered     0/0 discarded fragments/bytes, 0 lost received     0x2E2 received sequence, 0x2E2 sent sequence   Member links: 2 (max not set, min not set)     Se0/2/0:0, since 00:00:53     Se0/2/0:1, since 00:00:09 No inactive multilink interfaces 3845-1# 3845-1# 3845-1#show caller user Preet detailed   User: Preet, line Se0/2/0:0, service PPP         Connected for 00:01:31, Idle for 00:00:00   Timeouts:     Limit      Remaining Timer Type                -          -          -            PPP: LCP Open, multilink Open, CHAP (<-)   LCP: -> peer, AuthProto, MagicNumber, MRRU, EndpointDisc        <- peer, MagicNumber, MRRU, EndpointDisc   NCP: Closed IPCP, CDPCP   Dialer: Connected to 4087775100, inbound           Type is ISDN, group Se0/2/0:23   IP: Local 100.1.1.1   Bundle: Member of Preet   Counts: 1485 packets input, 101323 bytes, 0 no buffer           3 input errors, 3 CRC, 0 frame, 0 overrun           1485 packets output, 101089 bytes, 0 underruns           0 output errors, 0 collisions, 0 interface resets   User: Preet, line Se0/2/0:1, service PPP         Connected for 00:00:48, Idle for 00:00:02   Timeouts:     Limit      Remaining Timer Type                -          -          -            PPP: LCP Open, multilink Open, CHAP (<-)   LCP: -> peer, AuthProto, MagicNumber, MRRU, EndpointDisc        <- peer, MagicNumber, MRRU, EndpointDisc   Dialer: Connected to 4087775100, inbound           Type is ISDN, group Se0/2/0:23   IP: Local 100.1.1.1   Bundle: Member of Preet   Counts: 1015 packets input, 58709 bytes, 0 no buffer           0 input errors, 0 CRC, 0 frame, 0 overrun           1016 packets output, 58605 bytes, 0 underruns           0 output errors, 0 collisions, 0 interface resets   User: Preet, line Vi1, service MLP Bundle         Connected for 00:01:31, Idle for 00:00:25   Timeouts:     Limit      Remaining Timer Type                00:10:00   00:09:34   Dialer idle   PPP: LCP Open, multilink Open, IPCP, CDPCP   LCP: -> peer        <- peer   NCP: Open IPCP, CDPCP   IPCP: <- peer, Address         -> peer, Address   Dialer: Connected to 4087775100, inbound           Type is IN-BAND SYNC, group Se0/2/0:23   IP: Local 100.1.1.1, remote 100.1.1.6   Bundle: Bundle Preet, 2 links   Counts: 1112 packets input, 116090 bytes, 0 no buffer           0 input errors, 0 CRC, 0 frame, 0 overrun           1112 packets output, 128812 bytes, 0 underruns           0 output errors, 0 collisions, 0 interface resets Analog call *Sep   2 19:05:57.321: ISDN Se0/2/0:23 Q931: RX <- SETUP pd = 8   callref = 0x13B5             Bearer Capability i = 0x9090A2                         Standard = CCITT                         Transfer Capability = 3.1kHz Audio                         Transfer Mode = Circuit                         Transfer Rate = 64 kbit/s             Channel ID i = 0xA98381                         Exclusive, Channel 1             Progress Ind i = 0x8083 - Origination address is non-ISDN               Calling Party Number i = 0x2183, '4089559247'                         Plan:ISDN, Type:National             Called Party Number i = 0x80, '83115'                         Plan:Unknown, Type:Unknown *Sep   2 19:05:57.321: ISDN Se0/2/0:23 Q931: Received SETUP   callref = 0x93B5 callID = 0x0004 switch = primary-5ess interface = User *Sep   2 19:05:57.325: CSM: MODEM_REPORT from 0/2/0:0, call_id=0x4, event=0x1, cause=0x0, dchan_idb=0x67F90F14 *Sep   2 19:05:57.325: CSM: called_number '83115' modem_pool 6881CDB4 deny_call FALSE *Sep   2 19:05:57.325: CSM: Next free modem = 0/517; statbits = 10020 *Sep   2 19:05:57.325: Modem 0/517 CSM: modem is allocated, modems free=-1 *Sep   2 19:05:57.325: Modem 0/517 CSM: Incoming call from 4089559247 to 83115, id 0x4 *Sep   2 19:05:57.325: Modem 0/517 CSM: (CSM_PROC_IDLE)<--ISDN_CALL *Sep   2 19:05:57.325: ISDN Se0/2/0:23 Q931: TX -> CALL_PROC pd = 8   callref = 0x93B5             Channel ID i = 0xA98381                         Exclusive, Channel 1 *Sep   2 19:05:57.325: ISDN Se0/2/0:23 Q931: TX -> ALERTING pd = 8   callref = 0x93B5 *Sep   2 19:05:57.325: ISDN Se0/2/0:23 Q931: TX -> CONNECT pd = 8   callref = 0x93B5 *Sep   2 19:05:57.337: ISDN Se0/2/0:23 Q931: RX <- CONNECT_ACK pd = 8   callref = 0x13B5 *Sep   2 19:05:57.337: CSM: MODEM_REPORT from 0/2/0:0, call_id=0x4, event=0x4, cause=0x0, dchan_idb=0x67F90F14 *Sep   2 19:05:57.337: Modem 0/517 CSM: MODEM_REPORT rcvd DEV_CONNECTED for call_id 0x4 *Sep   2 19:05:57.337: Modem 0/517 CSM: (CSM_PROC_MODEM_RESERVED)<--ISDN_CONNECTED *Sep   2 19:05:57.337: Modem 0/517 CSMV12: SETUP(Answer) ISDN 0/2:0 *Sep   2 19:05:57.337: Modem 0/517 CSMV12: configured for Answer(Mu-law) mode, with Null signaling, 0x0 tone detection *Sep   2 19:05:57.337: Modem 0/517 CSMV12: INIT(Answer) ISDN 0/2:0 *Sep   2 19:05:57.337: %ISDN-6-CONNECT: Interface Serial0/2/0:0 is now connected to 4089559247 N/A *Sep   2 19:05:57.369: CSM: csm_modem_event called *Sep   2 19:05:57.369: Modem 0/517 CSM: (CSM_PROC_WAIT_FOR_CARRIER)<--CSM_EVENT_MODEM_SETUP *Sep   2 19:06:14.729: CSM: csm_modem_event called *Sep   2 19:06:14.729: Modem 0/517 CSM: (CSM_PROC_WAIT_FOR_CARRIER)<--MODEM_CONNECTED *Sep   2 19:06:14.733: Modem 0/517 CSMV12: CONNECT at 26400/28800 (Tx/Rx), V.34, LAP-M, V44 *Sep 2 19:06:14.741: TTY0/517: DSR came up *Sep   2 19:06:14.741: TTY0/517: no timer type 1 to destroy *Sep   2 19:06:14.741: TTY0/517: no timer type 0 to destroy *Sep   2 19:06:14.741: TTY0/517: no timer type 2 to destroy *Sep   2 19:06:14.741: tty0/517: Modem: IDLE->(unknown) *Sep   2 19:06:16.741: %LINK-3-UPDOWN: Interface Async0/517, changed state to up *Sep   2 19:06:16.741: As0/517 PPP: Using dialer call direction *Sep   2 19:06:16.741: As0/517 PPP: Treating connection as a callin *Sep   2 19:06:16.741: As0/517 PPP: Session handle[40000035] Session id[1] *Sep   2 19:06:16.741: As0/517 PPP: Phase is ESTABLISHING, Passive Open *Sep   2 19:06:16.741: As0/517 LCP: State is Listen *Sep   2 19:06:16.769: As0/517 LCP: I CONFREQ [Listen] id 4 len 20 *Sep   2 19:06:16.769: As0/517 LCP:     ACCM 0x000A0000 (0x0206000A0000) *Sep   2 19:06:16.769: As0/517 LCP:     MagicNumber 0x33B55A2B (0x050633B55A2B) *Sep   2 19:06:16.769: As0/517 LCP:     PFC (0x0702) *Sep   2 19:06:16.769: As0/517 LCP:     ACFC (0x0802) *Sep 2 19:06:16.769: As0/517 PPP: Authorization required *Sep   2 19:06:16.769: As0/517 LCP: O CONFREQ [Listen] id 1 len 25 *Sep   2 19:06:16.769: As0/517 LCP:     ACCM 0x000A0000 (0x0206000A0000) *Sep   2 19:06:16.769: As0/517 LCP:     AuthProto CHAP (0x0305C22305) *Sep   2 19:06:16.769: As0/517 LCP:     MagicNumber 0x24714CC4 (0x050624714CC4) *Sep   2 19:06:16.769: As0/517 LCP:     PFC (0x0702) *Sep   2 19:06:16.769: As0/517 LCP:     ACFC (0x0802) *Sep   2 19:06:16.769: As0/517 LCP: O CONFACK [Listen] id 4 len 20 *Sep   2 19:06:16.769: As0/517 LCP:     ACCM 0x000A0000 (0x0206000A0000) *Sep   2 19:06:16.769: As0/517 LCP:     MagicNumber 0x33B55A2B (0x050633B55A2B) *Sep   2 19:06:16.769: As0/517 LCP:     PFC (0x0702) *Sep   2 19:06:16.769: As0/517 LCP:     ACFC (0x0802) *Sep   2 19:06:16.969: As0/517 LCP: I CONFACK [ACKsent] id 1 len 25 *Sep   2 19:06:16.969: As0/517 LCP:     ACCM 0x000A0000 (0x0206000A0000) *Sep   2 19:06:16.969: As0/517 LCP:     AuthProto CHAP (0x0305C22305) *Sep   2 19:06:16.969: As0/517 LCP:     MagicNumber 0x24714CC4 (0x050624714CC4) *Sep   2 19:06:16.969: As0/517 LCP:     PFC (0x0702) *Sep   2 19:06:16.969: As0/517 LCP:     ACFC (0x0802) *Sep   2 19:06:16.969: As0/517 LCP: State is Open *Sep   2 19:06:16.969: As0/517 PPP: Phase is AUTHENTICATING, by this end *Sep   2 19:06:16.969: As0/517 CHAP: O CHALLENGE id 1 len 27 from "3845-1" *Sep   2 19:06:17.173: As0/517 CHAP: I RESPONSE id 1 len 27 from "1800-1" *Sep   2 19:06:17.173: As0/517 PPP: Phase is FORWARDING, Attempting Forward *Sep   2 19:06:17.173: As0/517 PPP: Phase is AUTHENTICATING, Unauthenticated ser *Sep   2 19:06:17.173: As0/517 PPP: Sent CHAP LOGIN Request *Sep   2 19:06:17.173: As0/517 PPP: Received LOGIN Response PASS *Sep   2 19:06:17.173: As0/517 PPP: Phase is FORWARDING, Attempting Forward *Sep   2 19:06:17.173: As0/517 PPP: Phase is AUTHENTICATING, Authenticated User *Sep   2 19:06:17.173: As0/517 PPP: Sent LCP AUTHOR Request *Sep   2 19:06:17.173: As0/517 PPP: Sent IPCP AUTHOR Request *Sep   2 19:06:17.173: As0/517 LCP: Received AAA AUTHOR Response PASS *Sep   2 19:06:17.173: As0/517 IPCP: Received AAA AUTHOR Response PASS *Sep   2 19:06:17.173: As0/517 CHAP: O SUCCESS id 1 len 4 *Sep   2 19:06:17.173: As0/517 PPP: Phase is UP *Sep   2 19:06:17.173: As0/517 IPCP: O CONFREQ [Closed] id 1 len 10 *Sep   2 19:06:17.173: As0/517 IPCP:     Address 100.1.1.1 (0x030664010101) *Sep   2 19:06:17.173: As0/517 PPP: Process pending ncp packets *Sep   2 19:06:17.349: As0/517 IPCP: I CONFREQ [REQsent] id 1 len 10 *Sep   2 19:06:17.349: As0/517 IPCP:     Address 0.0.0.0 (0x030600000000) 3845-1(config-if)# *Sep   2 19:06:17.349: As0/517 AAA/AUTHOR/IPCP: Start.   Her address 0.0.0.0, we ant 0.0.0.0 *Sep   2 19:06:17.349: As0/517 AAA/AUTHOR/IPCP: Done.   Her address 0.0.0.0, we want 0.0.0.0 *Sep   2 19:06:17.349: As0/517 IPCP: Pool returned 100.1.1.2 *Sep   2 19:06:17.349: As0/517 IPCP: O CONFNAK [REQsent] id 1 len 10 *Sep   2 19:06:17.349: As0/517 IPCP:     Address 100.1.1.2 (0x030664010102) *Sep   2 19:06:17.529: As0/517 IPCP: I CONFREQ [REQsent] id 2 len 10 *Sep   2 19:06:17.529: As0/517 IPCP:     Address 100.1.1.2 (0x030664010102) *Sep   2 19:06:17.529: As0/517 IPCP: O CONFACK [REQsent] id 2 len 10 *Sep   2 19:06:17.529: As0/517 IPCP:     Address 100.1.1.2 (0x030664010102) *Sep   2 19:07:17.609: As0/517 IPCP: I CONFACK [ACKsent] id 17 len 10 *Sep   2 19:07:17.609: As0/517 IPCP:     Address 100.1.1.1 (0x030664010101) *Sep   2 19:07:17.609: As0/517 IPCP: State is Open *Sep   2 19:07:17.609: As0/517 IPCP: Install route to 100.1.1.2 *Sep   2 19:07:17.609: As0/517 IPCP: Add link info for cef entry 100.1.1.2 3845-1# 3845-1# 3845-1# 3845-1#sh users     Line        User        Host(s)               Idle        Location    0 con 0                 1.1.1.1                  2d22h    tty 0/517     Param       Async interface       00:00:04    PPP: 100.1.1.2 *706 vty 0                 idle                  00:00:00 10.1.1.1   Interface     User                Mode          Idle      Peer Address 3845-1#sh caller user Param detailed   User: Param, line tty 0/517, service Async         Active time 00:01:20   Timeouts:     Limit      Remaining Timer Type                -          -          -            TTY: Line 0/517, running PPP on As0/517   Location: PPP: 100.1.1.2   Line: Baud rate (TX/RX) is 115200/115200, no parity, 2 stopbits, 8 databits   Status: Ready, Active, No Exit Banner, Async Interface Active   Capabilities: Modem Callout, Modem RI is CD,                 Line usable as async interface, Integrated Modem Modem State: Ready   User: Param, line As0/517, service PPP         Connected for 00:01:18, Idle for 00:01:18   Timeouts:     Limit      Remaining Timer Type                00:05:00   00:03:41   Dialer idle   PPP: LCP Open, multilink Closed, CHAP (<-), IPCP   LCP: -> peer, ACCM, AuthProto, MagicNumber, PCompression, ACCompression               EndpointDisc        <- peer, ACCM, MagicNumber, PCompression, ACCompression   NCP: Open IPCP   IPCP: <- peer, Address         -> peer, Address   Dialer: Connected, inbound           Type is IN-BAND ASYNC, group As0/517   IP: Local 100.1.1.1, remote 100.1.1.2   Counts: 222 packets input, 3182 bytes, 0 no buffer           0 input errors, 0 CRC, 0 frame, 0 overrun           39 packets output, 547 bytes, 0 underruns           0 output errors, 0 collisions, 0 interface resets 3845-1#sh dialer map Dynamic dialer map ip 100.1.1.2    name Param      () on As0/517 ... View more

Configuring and Troubleshooting ISRs with HWIC-2CE1T1-PRI with PVDM2-24DM for incoming async calls Introduction Now we all know that ISRs are becoming more and more popular for customer deployments. In many environments, customer need to configure an ISRs that can accept incoming calls from both Async and ISDN users. Such a setup is commonly used to provide network connectivity to users who travel and are telecommuters, and also for Small Office-Home Office (SOHO) sites.   As we all know that   many customers are migrating from their old NM-xCTE1-PRI modules to HWICs and VWICs because NM-xCTE1-PRI modules are End-Of-Sale as of December 29, 2008. Pl. visit following url for EOS announcements and migration path. https://www.cisco.com/en/US/prod/collateral/routers/ps5855/eol_c51_484362.html That said, HWICs are the perfect replacements for old NMs for data calls.   This document describes how to configure an Access Server to accept incoming Async calls on ISDN T1 PRI circuits. The configuration provides the minimum setup required for the Integrated Service Routers ( ISRs) to accept the call. You can add additional features to this configuration based on your needs. Topology : 3845-1#sh     sh ver Cisco IOS Software, 3800 Software (C3845-ADVENTERPRISEK9-M), Version 12.4(24)T1, RELEASE SOFTWARE (fc3) <snip> 3845-1#sh run Building configuration... Current configuration : 3183 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption service internal ! hostname 3845-1 ! boot-start-marker boot-end-marker ! card type t1 0 2 ! !---Need to define a card type about the use of HWIC-2TE1-PRI card to be a T1 card or a !---E1 card. Here we are using it as a T1 card. logging message-counter syslog logging buffered 65535 enable secret 5 $1$clc3$GfelyWY1QQs6bCR4lxwl.. ! no aaa new-model network-clock-participate wic 0 !--- Allow other WICs modules to drive the clock from the selected T1 line network-clock-select 1 T1 0/2/0 !--- Allow other WICs modules to drive the clock from the selected T1 line ! dot11 syslog ip source-route ip cef ! no ip domain lookup no ipv6 cef ! multilink bundle-name authenticated ! isdn switch-type primary-5ess ! voice-card 0 ! ! username 1811-1 password 0 cisco username 1800-1 password 0 cisco username Param password 0 cisco ! archive log config   hidekeys ! controller T1 0/2/0 cablelength long 0db pri-group timeslots 1-24 !--- For T1 PRI scenarios, all 24 T1 timeslots are assigned as    !--- ISDN PRI channels. The router now automatically creates the    !--- corresponding D-channel: interface Serial 0/2/0:23. !--- Framing for this T1 is Extended Super Frame (ESF) and linecode is !--- B8ZS is default. Obtain these information from the Telco. controller T1 0/2/1 cablelength long 0db ! ! interface Loopback1 ip address 100.1.1.1 255.255.255.0 !--- The IP pool for ISDN users is in this subnet.   !--- The routes for all ISDN clients are summarized and    !--- propagated to the backbone instead of 254 routes. interface GigabitEthernet0/0 ip address 172.16.163.203 255.255.255.224 duplex auto speed auto media-type rj45 ! interface GigabitEthernet0/1 no ip address shutdown duplex auto speed auto media-type rj45 ! interface Serial0/1/0:23 no ip address encapsulation ppp isdn switch-type primary-5ess isdn incoming-voice voice ! interface Serial0/2/0:23 ip unnumbered Loopback1 encapsulation ppp dialer-group 1 isdn switch-type primary-5ess isdn incoming-voice modem !--- All incoming voice calls on this T1 are sent to the modems.   !--- This command is required if this T1 is to accept async modem calls. peer default ip address pool My-IP ! interface Integrated-Service-Engine4/0 no ip address shutdown !Application: NME-APA running on BRYCE no keepalive ! interface Group-Async1                    !--- This group-async interface is the configuration template for all !--- modems.   You need not configure individual async interfaces !--- because you can clone the interfaces from one managed copy. ip unnumbered Loopback1 !--- A Loopback interface is always up/up. So, unnumber the Loopback !--- interface for stability. encapsulation ppp dialer in-band dialer idle-timeout 300 either !--- Idle Timeout is defined as 300 secs which is 5 mins.   dialer-group 1 !--- Interesting traffic is defined in dialer-list 1.   !--- Note: The specified dialer-group number must be the same as the    !--- dialer-list number. In this example, the number is defined as "1". async mode dedicated peer default ip address pool My-IP !--- Clients are assigned addresses from the IP address pool named !--- My-IP which needs to be configured later in the config. ppp authentication chap callin !--- Use CHAP authentication. ppp multilink !--- Configure the interface to use multilink. !--- Without this command multilink is NOT negotiated. !--- This command is needed to bind more than one calls from the same !--- user together. group-range 0/514 0/537 !--- Modems 0/514 through 0/537 are members of this group async !--- interface ! ip local pool My-IP 100.1.1.2 100.1.1.100 !--- IP address pools for dialin clients. ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 172.16.163.193 ip http server no ip http secure-server ! ! voice-port 0/1/0:23 ! ! mgcp fax t38 ecm mgcp behavior g729-variants static-pt ! ! ! ! ! ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 privilege level 15 password cisco login line 258 no activation-character no exec transport preferred none transport input all transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh line 0/514 0/537 modem InOut   !--- Support incoming and outgoing modem calls.    transport input all    autoselect during-login   ! ---   Displays the username:password prompt after modems connect.   autoselect ppp   !--- Automatically launches PPP if the router detects incoming PPP !--- packets. Without this command the dialin client must manually    !--- launch PPP (from Exec mode). line vty 0 4 exec-timeout 60 0 privilege level 15 password cisco logging synchronous login line vty 5 10 exec-timeout 60 0 privilege level 15 password cisco logging synchronous login ! scheduler allocate 20000 1000 end 3845-1#     3845-1# 3845-1# 3845-1# 3845-1# end 3845-1# sh diag 3845 Backplane EEPROM: <snip>            PVDM Slot 1:             24 port PVDMII digital modem PVDM daughter card             Hardware Revision         : 2.0             Part Number               : 73-10101-03             Board Revision            : 02             Deviation Number          : 0-0             Fab Version               : 02             PCB Serial Number         : FHH10100018             RMA Test History          : 00             RMA Number                : 0-0-0-0             RMA History               : 00             Processor type            : 00             Product (FRU) Number      : PVDM2-24DM             Version Identifier        : V01             EEPROM format version 4             EEPROM contents (hex):               0x00: 04 FF 40 04 8F 41 02 00 82 49 27 75 03 42 30 32               0x10: 80 00 00 00 00 02 02 C1 8B 46 48 48 31 30 31 30               0x20: 30 30 31 38 03 00 81 00 00 00 00 04 00 09 00 CB               0x30: 8A 50 56 44 4D 32 2D 32 34 44 4D 89 56 30 31 20               0x40: D9 02 40 C1 FF FF FF FF FF FF FF FF FF FF FF FF               0x50: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF               0x60: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF               0x70: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF             <snip>             WIC Slot 2:             2 port channelized and PRI T1/E1 HWIC             Hardware Revision         : 0.0             Top Assy. Part Number     : 800-27137-02             Part Number               : 73-10363-03             Board Revision            : A0             Deviation Number          : 88300             Fab Version               : 03             PCB Serial Number         : FOC110300X6             RMA Test History          : 00             RMA Number                : 0-0-0-0             RMA History               : 00             Version Identifier        : V01             Product (FRU) Number      : HWIC-2CE1T1-PRI             CLEI Code                 : COUIAKHCAA             EEPROM format version 4             EEPROM contents (hex):               0x00: 04 FF 40 05 2A 41 00 00 C0 46 03 20 00 6A 01 02               0x10: 82 49 28 7B 03 42 41 30 88 00 01 58 EC 02 03 C1               0x20: 8B 46 4F 43 31 31 30 33 30 30 58 36 03 00 81 00               0x30: 00 00 00 04 00 89 56 30 31 20 CB 8F 48 57 49 43               0x40: 2D 32 43 45 31 54 31 2D 50 52 49 C6 8A 43 4F 55               0x50: 49 41 4B 48 43 41 41 D9 02 40 C1 FF FF FF FF FF               0x60: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF               0x70: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF             3845-1#show network-clocks   Network Clock Configuration   ---------------------------   Priority       Clock Source     Clock State      Clock Type      1           T1 0/2/0         GOOD             T1           !--- The clock is derived from primary T1 line in 0/2/0     11           Backplane        GOOD             PLL            Current Primary Clock Source   ---------------------------   Priority       Clock Source     Clock State      Clock Type      1           T1 0/2/0         GOOD             T1 3845-1#sh isdn stat Global ISDN Switchtype = primary-5ess ISDN Serial0/2/0:23 interface        dsl 0, interface ISDN Switchtype = primary-5ess     Layer 1 Status:         ACTIVE     Layer 2 Status:         TEI = 0, Ces = 1, SAPI = 0, State = MULTIPLE_FRAME_ESTABLISHED     Layer 3 Status:         0 Active Layer 3 Call(s)     Active dsl 0 CCBs = 0     The Free Channel Mask:   0x807FFFFF     Number of L2 Discards = 0, L2 Session ID = 3 Troubleshooting Commands Certain show commands are supported by the Output Interpreter Tool ( registered customers only ) , which allows you to view an analysis of show command output. Note: Before issuing debug commands, please see Important Information on Debug Commands. ·        debug dialer—displays DDR debugging information about the packets received on a dialer interface. This information can help to ensure there is interesting traffic that uses the dialer interface. ·        debug isdn q931—shows call setup and tear down of the ISDN network connection (Layer 3). ·        debug modem—displays modem line activity on an access server. The output displays when the modem line changes state. ·        debug modem csm—enables you to troubleshoot Call Switching Module (CSM) problems on routers with internal digital modems. With this command, you can trace the complete sequence of switching incoming and outgoing calls. ·        debug ppp negotiation—displays information on the PPP traffic and exchanges, and negotiates Link Control Protocol (LCP), Authentication, and Network Control Protocol (NCP). A successful PPP negotiation first opens the LCP state, then authenticates, and finally negotiates NCP. Multilink Parameters such as Maximum Receive Reconstructed Unit (MRRU) are established during LCP negotiation. ·        debug ppp authentication—displays PPP authentication protocol messages, including CHAP packet exchanges and Password Authentication Protocol (PAP) exchanges. ·        debug ppp error—displays protocol errors and error statistics associated with PPP connection negotiation and operation. Sample debug Output for   Async call *Sep   2 19:05:57.321: ISDN Se0/2/0:23 Q931: RX <- SETUP pd = 8   callref = 0x13B5             Bearer Capability i = 0x9090A2                         Standard = CCITT                         Transfer Capability = 3.1kHz Audio                         Transfer Mode = Circuit                         Transfer Rate = 64 kbit/s             Channel ID i = 0xA98381                         Exclusive, Channel 1             Progress Ind i = 0x8083 - Origination address is non-ISDN               Calling Party Number i = 0x2183, '4089559247'                         Plan:ISDN, Type:National             Called Party Number i = 0x80, '83115'                         Plan:Unknown, Type:Unknown *Sep   2 19:05:57.321: ISDN Se0/2/0:23 Q931: Received SETUP   callref = 0x93B5 callID = 0x0004 switch = primary-5ess interface = User *Sep   2 19:05:57.325: CSM: MODEM_REPORT from 0/2/0:0, call_id=0x4, event=0x1, cause=0x0, dchan_idb=0x67F90F14 *Sep   2 19:05:57.325: CSM: called_number '83115' modem_pool 6881CDB4 deny_call FALSE *Sep   2 19:05:57.325: CSM: Next free modem = 0/517; statbits = 10020 *Sep   2 19:05:57.325: Modem 0/517 CSM: modem is allocated, modems free=-1 *Sep   2 19:05:57.325: Modem 0/517 CSM: Incoming call from 4089559247 to 83115, id 0x4 *Sep   2 19:05:57.325: Modem 0/517 CSM: (CSM_PROC_IDLE)<--ISDN_CALL *Sep   2 19:05:57.325: ISDN Se0/2/0:23 Q931: TX -> CALL_PROC pd = 8   callref = 0x93B5             Channel ID i = 0xA98381                         Exclusive, Channel 1 *Sep   2 19:05:57.325: ISDN Se0/2/0:23 Q931: TX -> ALERTING pd = 8   callref = 0x93B5 *Sep   2 19:05:57.325: ISDN Se0/2/0:23 Q931: TX -> CONNECT pd = 8   callref = 0x93B5 *Sep   2 19:05:57.337: ISDN Se0/2/0:23 Q931: RX <- CONNECT_ACK pd = 8   callref = 0x13B5 *Sep   2 19:05:57.337: CSM: MODEM_REPORT from 0/2/0:0, call_id=0x4, event=0x4, cause=0x0, dchan_idb=0x67F90F14 *Sep   2 19:05:57.337: Modem 0/517 CSM: MODEM_REPORT rcvd DEV_CONNECTED for call_id 0x4 *Sep   2 19:05:57.337: Modem 0/517 CSM: (CSM_PROC_MODEM_RESERVED)<--ISDN_CONNECTED *Sep   2 19:05:57.337: Modem 0/517 CSMV12: SETUP(Answer) ISDN 0/2:0 *Sep   2 19:05:57.337: Modem 0/517 CSMV12: configured for Answer(Mu-law) mode, with Null signaling, 0x0 tone detection *Sep   2 19:05:57.337: Modem 0/517 CSMV12: INIT(Answer) ISDN 0/2:0 *Sep   2 19:05:57.337: %ISDN-6-CONNECT: Interface Serial0/2/0:0 is now connected to 4089559247 N/A 3845-1(config-if)# *Sep   2 19:05:57.369: CSM: csm_modem_event called *Sep   2 19:05:57.369: Modem 0/517 CSM: (CSM_PROC_WAIT_FOR_CARRIER)<--CSM_EVENT_MODEM_SETUP 3845-1(config-if)# *Sep   2 19:06:14.729: CSM: csm_modem_event called *Sep   2 19:06:14.729: Modem 0/517 CSM: (CSM_PROC_WAIT_FOR_CARRIER)<--MODEM_CONNECTED *Sep   2 19:06:14.733: Modem 0/517 CSMV12: CONNECT at 26400/28800 (Tx/Rx), V.34, LAP-M, V44 *Sep   2 19:06:14.741: TTY0/517: DSR came up *Sep   2 19:06:14.741: TTY0/517: no timer type 1 to destroy *Sep   2 19:06:14.741: TTY0/517: no timer type 0 to destroy *Sep   2 19:06:14.741: TTY0/517: no timer type 2 to destroy *Sep   2 19:06:14.741: tty0/517: Modem: IDLE->(unknown) *Sep   2 19:06:16.741: %LINK-3-UPDOWN: Interface Async0/517, changed state to up *Sep   2 19:06:16.741: As0/517 PPP: Using dialer call direction *Sep   2 19:06:16.741: As0/517 PPP: Treating connection as a callin *Sep   2 19:06:16.741: As0/517 PPP: Session handle[40000035] Session id[1] *Sep   2 19:06:16.741: As0/517 PPP: Phase is ESTABLISHING, Passive Open *Sep   2 19:06:16.741: As0/517 LCP: State is Listen *Sep   2 19:06:16.769: As0/517 LCP: I CONFREQ [Listen] id 4 len 20 *Sep   2 19:06:16.769: As0/517 LCP:     ACCM 0x000A0000 (0x0206000A0000) *Sep   2 19:06:16.769: As0/517 LCP:     MagicNumber 0x33B55A2B (0x050633B55A2B) *Sep   2 19:06:16.769: As0/517 LCP:     PFC (0x0702) *Sep   2 19:06:16.769: As0/517 LCP:     ACFC (0x0802) *Sep   2 19:06:16.769: As0/517 PPP: Authorization required *Sep   2 19:06:16.769: As0/517 LCP: O CONFREQ [Listen] id 1 len 25 *Sep   2 19:06:16.769: As0/517 LCP:     ACCM 0x000A0000 (0x0206000A0000) *Sep   2 19:06:16.769: As0/517 LCP:     AuthProto CHAP (0x0305C22305) *Sep   2 19:06:16.769: As0/517 LCP:     MagicNumber 0x24714CC4 (0x050624714CC4) *Sep   2 19:06:16.769: As0/517 LCP:     PFC (0x0702) *Sep   2 19:06:16.769: As0/517 LCP:     ACFC (0x0802) *Sep   2 19:06:16.769: As0/517 LCP: O CONFACK [Listen] id 4 len 20 *Sep   2 19:06:16.769: As0/517 LCP:     ACCM 0x000A0000 (0x0206000A0000) *Sep   2 19:06:16.769: As0/517 LCP:     MagicNumber 0x33B55A2B (0x050633B55A2B) *Sep   2 19:06:16.769: As0/517 LCP:     PFC (0x0702) *Sep   2 19:06:16.769: As0/517 LCP:     ACFC (0x0802) *Sep   2 19:06:16.969: As0/517 LCP: I CONFACK [ACKsent] id 1 len 25 *Sep   2 19:06:16.969: As0/517 LCP:     ACCM 0x000A0000 (0x0206000A0000) *Sep   2 19:06:16.969: As0/517 LCP:     AuthProto CHAP (0x0305C22305) *Sep   2 19:06:16.969: As0/517 LCP:     MagicNumber 0x24714CC4 (0x050624714CC4) *Sep   2 19:06:16.969: As0/517 LCP:     PFC (0x0702) *Sep   2 19:06:16.969: As0/517 LCP:     ACFC (0x0802) *Sep   2 19:06:16.969: As0/517 LCP: State is Open *Sep   2 19:06:16.969: As0/517 PPP: Phase is AUTHENTICATING, by this end *Sep   2 19:06:16.969: As0/517 CHAP: O CHALLENGE id 1 len 27 from "3845-1" *Sep   2 19:06:17.173: As0/517 CHAP: I RESPONSE id 1 len 27 from "1800-1" *Sep   2 19:06:17.173: As0/517 PPP: Phase is FORWARDING, Attempting Forward *Sep   2 19:06:17.173: As0/517 PPP: Phase is AUTHENTICATING, Unauthenticated User *Sep   2 19:06:17.173: As0/517 PPP: Sent CHAP LOGIN Request *Sep   2 19:06:17.173: As0/517 PPP: Received LOGIN Response PASS *Sep   2 19:06:17.173: As0/517 PPP: Phase is FORWARDING, Attempting Forward *Sep   2 19:06:17.173: As0/517 PPP: Phase is AUTHENTICATING, Authenticated User *Sep   2 19:06:17.173: As0/517 PPP: Sent LCP AUTHOR Request *Sep   2 19:06:17.173: As0/517 PPP: Sent IPCP AUTHOR Request *Sep   2 19:06:17.173: As0/517 LCP: Received AAA AUTHOR Response PASS *Sep   2 19:06:17.173: As0/517 IPCP: Received AAA AUTHOR Response PASS *Sep   2 19:06:17.173: As0/517 CHAP: O SUCCESS id 1 len 4 *Sep   2 19:06:17.173: As0/517 PPP: Phase is UP *Sep   2 19:06:17.173: As0/517 IPCP: O CONFREQ [Closed] id 1 len 10 *Sep   2 19:06:17.173: As0/517 IPCP:     Address 100.1.1.1 (0x030664010101) *Sep   2 19:06:17.173: As0/517 PPP: Process pending ncp packets *Sep   2 19:06:17.349: As0/517 IPCP: I CONFREQ [REQsent] id 1 len 10 *Sep   2 19:06:17.349: As0/517 IPCP:     Address 0.0.0.0 (0x030600000000) 3845-1(config-if)# *Sep   2 19:06:17.349: As0/517 AAA/AUTHOR/IPCP: Start.   Her address 0.0.0.0, we want 0.0.0.0 *Sep   2 19:06:17.349: As0/517 AAA/AUTHOR/IPCP: Done.   Her address 0.0.0.0, we want 0.0.0.0 *Sep   2 19:06:17.349: As0/517 IPCP: Pool returned 100.1.1.2 *Sep   2 19:06:17.349: As0/517 IPCP: O CONFNAK [REQsent] id 1 len 10 *Sep   2 19:06:17.349: As0/517 IPCP:     Address 100.1.1.2 (0x030664010102) *Sep   2 19:06:17.529: As0/517 IPCP: I CONFREQ [REQsent] id 2 len 10 *Sep   2 19:06:17.529: As0/517 IPCP:     Address 100.1.1.2 (0x030664010102) *Sep   2 19:06:17.529: As0/517 IPCP: O CONFACK [REQsent] id 2 len 10 *Sep   2 19:06:17.529: As0/517 IPCP:     Address 100.1.1.2 (0x030664010102) *Sep   2 19:07:17.609: As0/517 IPCP: I CONFACK [ACKsent] id 17 len 10 *Sep   2 19:07:17.609: As0/517 IPCP:     Address 100.1.1.1 (0x030664010101) *Sep   2 19:07:17.609: As0/517 IPCP: State is Open *Sep   2 19:07:17.609: As0/517 IPCP: Install route to 100.1.1.2 *Sep   2 19:07:17.609: As0/517 IPCP: Add link info for cef entry 100.1.1.2 3845-1# 3845-1# 3845-1# 3845-1# 3845-1#sh users     Line        User        Host(s)               Idle        Location    0 con 0                 1.1.1.1                  2d22h    tty 0/531     Param       Async interface       00:00:04    PPP: 100.1.1.2 *706 vty 0                 idle                  00:00:00 10.1.1.1   Interface     User                Mode          Idle      Peer Address 3845-1#sh caller user Param detailed   User: Param, line tty 0/517, service Async         Active time 00:01:20   Timeouts:     Limit      Remaining Timer Type                -          -          -            TTY: Line 0/531, running PPP on As0/531   Location: PPP: 100.1.1.7   Line: Baud rate (TX/RX) is 115200/115200, no parity, 2 stopbits, 8 databits   Status: Ready, Active, No Exit Banner, Async Interface Active   Capabilities: Modem Callout, Modem RI is CD,                 Line usable as async interface, Integrated Modem   Modem State: Ready   User: Param, line As0/531, service PPP         Connected for 00:01:18, Idle for 00:01:18   Timeouts:     Limit      Remaining Timer Type                00:05:00   00:03:41   Dialer idle   PPP: LCP Open, multilink Closed, CHAP (<-), IPCP   LCP: -> peer, ACCM, AuthProto, MagicNumber, PCompression, ACCompression               EndpointDisc        <- peer, ACCM, MagicNumber, PCompression, ACCompression   NCP: Open IPCP   IPCP: <- peer, Address         -> peer, Address   Dialer: Connected, inbound           Type is IN-BAND ASYNC, group As0/531   IP: Local 100.1.1.1, remote 100.1.1.2   Counts: 222 packets input, 3182 bytes, 0 no buffer           0 input errors, 0 CRC, 0 frame, 0 overrun           39 packets output, 547 bytes, 0 underruns           0 output errors, 0 collisions, 0 interface resets 3845-1#sh dialer map Dynamic dialer map ip 100.1.1.2    name Param      () on As0/531 ... View more