Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About DOUGLAS DRURY
Stats
Member since
07-22-2012
107
Posts
5
Helpful
0
Solutions
07-18-2019
03:41 AM
A 3rd party has asked me to open a range of ports for a new phone system they are installing. However, I can't figure out how to open a range of ports on my Cisco 1921. They are asking me to open ports 10000 to 20000 I have done this for port 5060 but that is just one port. We only have 1 WAN interface (Dialer 1) and the NAT only needs to go to 1 device 192.168.20.240 does anybody have any ideas on how to do this? I have had a look and can see some people have had mixed results with route maps or they have just ented a thousand lines of NAT. As I said NATing port 5060 was simple as per below ip nat inside source static udp 192.168.20.240 5060 interface Dialer1 5060 Thanks
... View more
Labels:
11-10-2017
01:24 AM
Hi,
Thanks for your help so far.
I tried to add shape average 20000000 in the parent policy but the router rejected it with % Invalid input detected at '^' marker. The marker was at shape
Below is my configuration.
RT#sh run br Building configuration...
Current configuration : 5419 bytes ! ! Last configuration change at 08:18:00 UTC Fri Nov 10 2017 by doug version 15.3 no service pad service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname RT ! boot-start-marker boot system flash:c880data-universalk9-mz.153-3.M9.bin boot system flash:c880data-universalk9-mz.153-3.M.bin boot-end-marker ! ! enable secret 4 sii94NGY12oyst/3n4bnmySHfE/PcvkoNt83rjGoB8I ! aaa new-model ! ! aaa authentication login VPNUSERSAUTH local aaa authorization network VPNUSERS local ! ! ! ! ! aaa session-id common memory-size iomem 10 ! crypto pki trustpoint TP-self-signed-1949736083 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-1949736083 revocation-check none rsakeypair TP-self-signed-1949736083 ! ! crypto pki certificate chain TP-self-signed-1949736083 certificate self-signed 01 ! ! ! !
! ip dhcp excluded-address 192.168.20.20 192.168.20.50 ip dhcp excluded-address 192.168.1.1 192.168.1.20 ip dhcp excluded-address 192.168.1.200 192.168.1.254 ! ! ! ip domain name REMOVED.local ip name-server 8.8.8.8 ip cef no ipv6 cef ! ! multilink bundle-name authenticated license udi pid CISCO887VA-SEC-K9 sn FCZ181070DN ! ! username REMOVED privilege 15 secret 4 REMOVED ! ! ! ! ! controller VDSL 0 firmware filename flash:VA_A_39m_B_38h3_24h.bin ! ! class-map match-any VoIP match access-group name VOIP ! policy-map VOIPQOS_CHILD class VoIP priority percent 50 set dscp ef class class-default fair-queue policy-map VOIPQOS_PARENT class class-default service-policy VOIPQOS_CHILD ! ! ! crypto isakmp policy 7 encr 3des hash md5 authentication pre-share group 2 crypto isakmp key REMOVED address REMOVED no-xauth ! crypto isakmp client configuration group VPNUSERS key REMOVED dns 192.168.1.201 domain REMOVED.local pool VPN-POOL acl VPNSPLIT ! ! crypto ipsec transform-set REMOVED esp-3des esp-md5-hmac mode tunnel ! ! ! crypto dynamic-map VPNDYNMAP 1 set transform-set REMOVED reverse-route ! ! crypto map MAP-OUTSIDE client authentication list VPNUSERSAUTH crypto map MAP-OUTSIDE isakmp authorization list VPNUSERS crypto map MAP-OUTSIDE client configuration address respond crypto map MAP-OUTSIDE 10 ipsec-isakmp set peer REMOVED set transform-set REMOVED match address S2S crypto map MAP-OUTSIDE 65000 ipsec-isakmp dynamic VPNDYNMAP ! ! ! ! ! interface Ethernet0 no ip address ! interface Ethernet0.101 encapsulation dot1Q 101 pppoe enable group global pppoe-client dial-pool-number 1 ! interface ATM0 no ip address shutdown no atm ilmi-keepalive ! interface ATM0.1 point-to-point pvc 0/38 encapsulation aal5mux ppp dialer dialer pool-member 1 ! ! interface FastEthernet0 switchport mode trunk no ip address ! interface FastEthernet1 switchport access vlan 20 no ip address ! interface FastEthernet2 switchport access vlan 90 no ip address ! interface FastEthernet3 no ip address ! interface Vlan1 ip address 192.168.1.1 255.255.255.0 ip nat inside ip virtual-reassembly in ! interface Vlan15 ip address 192.168.15.3 255.255.255.0 ! interface Vlan20 ip address 192.168.20.1 255.255.255.0 ip nat inside ip virtual-reassembly in ! interface Vlan90 ip address 10.1.1.1 255.255.255.0 ip nat inside ip virtual-reassembly in ! interface Dialer1 description BT VDSL ip address negotiated no ip redirects no ip unreachables no ip proxy-arp ip nbar protocol-discovery ip flow ingress ip nat outside ip virtual-reassembly in encapsulation ppp ip tcp adjust-mss 1452 dialer pool 1 ppp authentication pap chap ms-chap callin ppp chap hostname REMOVED ppp chap password 0 REMOVED ppp ipcp address accept no cdp enable crypto map MAP-OUTSIDE ! ! router eigrp 10 network 192.168.1.0 network 192.168.20.0 ! ip local pool VPN-POOL 10.1.74.5 10.1.74.250 ip forward-protocol nd ip http server ip http authentication local ip http secure-server ! ! no ip nat service sip udp port 5060 ip nat inside source list NAT interface Dialer1 overload ip route 0.0.0.0 0.0.0.0 Dialer1 ip route 192.168.15.0 255.255.255.0 Vlan1 ip route 192.168.30.0 255.255.255.0 192.168.20.203 ! ip access-list extended NAT deny ip 192.168.15.0 0.0.0.255 192.168.40.0 0.0.0.255 deny ip 192.168.1.0 0.0.0.255 192.168.40.0 0.0.0.255 deny ip 192.168.1.0 0.0.0.255 192.168.10.0 0.0.0.255 deny ip 192.168.1.0 0.0.0.255 10.1.74.0 0.0.0.255 deny ip 192.168.20.0 0.0.0.255 10.1.74.0 0.0.0.255 deny ip 10.1.1.0 0.0.0.255 10.1.74.0 0.0.0.255 permit ip 192.168.1.0 0.0.0.255 any permit ip 192.168.20.0 0.0.0.255 any permit ip 10.1.1.0 0.0.0.255 any ip access-list extended S2S permit ip 192.168.15.0 0.0.0.255 192.168.40.0 0.0.0.255 permit ip 192.168.1.0 0.0.0.255 192.168.10.0 0.0.0.255 ip access-list extended VOIP permit tcp any any range 6000 6049 permit tcp any any eq 5060 ip access-list extended VPNSPLIT permit ip 192.168.1.0 0.0.0.255 10.1.74.0 0.0.0.255 permit ip 192.168.20.0 0.0.0.255 10.1.74.0 0.0.0.255 permit ip 192.168.15.0 0.0.0.255 10.1.74.0 0.0.0.255 ! ! ! ! ! control-plane ! ! ! line con 0 no modem enable line aux 0 line vty 0 4 privilege level 15 transport input telnet ssh transport output telnet ssh ! ! end RT#
... View more
11-10-2017
12:56 AM
Hi,
I tried your suggestion and got the below for each of the interfaces. It hasn't applied to any of the interfaces
RT(config-if)#service-policy output VOIPQOS_PARENT Cannot attach queuing-based child policy to a non-queuing based class RTconfig-if)# RT(config-subif)#service-policy output VOIPQOS_PARENT Cannot attach queuing-based child policy to a non-queuing based class RT(config)# RT(config)#interface ether 0 RT(config-if)#service-policy output VOIPQOS_PARENT Service_policy with queueing features on this interface is not allowed if dialer based queuing policy is already installed. RT(config)#
... View more
11-10-2017
12:31 AM
Hi,
I couldn't apply it to the dialer interface anyway because the router rejected the command with the error: Flow Fair Queueing feature is not supported in default class of parent level policy of.
Thanks
... View more
11-10-2017
12:16 AM
Thanks for the reply.
I'm using IOS: System image file is "flash:c880data-universalk9-mz.153-3.M9.bin"
When I tried to apply the command to the interface I go the below. I'm on a VDSL line so I use Ethernet0.101
RT(config)#inter ethernet 0.101 RT(config-subif)#service-policy output VOIPQOS CBWFQ : Not supported on subinterfaces RT(config-subif)#exit RT(config)#inter ethernet 0 RT(config-if)# RT(config-if)#service-policy output VOIPQOS Service_policy with queueing features on this interface is not allowed if dialer based queuing policy is already installed.
RT(config-if)#
... View more
11-09-2017
11:15 PM
Hi All.
I’m looking for some help with SIP/VOIP prioritization on my Cisco 887va. We have a remotely hosted SIP phone system. The problem is when we are working on PC’s for clients and they start to download updates for Windows 10 we are getting choppy audio on calls. I’m trying to fix this with some QOS/priority towards SIP traffic. However, in my testing and development I need a bit of help.
Below is my configuration that I’m adapted from examples. We are on an FTTC/VDSL line 70Mb download and 20Mb Upload speeds.
ip access-list extended VOIP
permit tcp any any range 6000 6049
permit tcp any any eq 5060
class-map match-any VoIP
match access-group name VOIP
policy-map VOIPQOS
class VoIP
priority percent 50
set dscp ef
class class-default
fair-queue
When I try to apply this to the dialer interface I get the below error
RT (config-if)#service-policy output VOIPQOS
Flow Fair Queueing feature is not supported in default class of parent level policy of
... View more
Labels:
03-01-2017
10:07 AM
Can anybody offer up some advide as to how to fix this problem. I've erased the config and started again but still not getting an IP.
when i do a sh ip int br i can see under the dialer interface it's set to either manual or NVRAM not IPCP as it used to be?
... View more
02-23-2017
09:49 AM
Hi,
I added in the uk modem options however, still no success in getting an IP address. the router is in my office on a test line and it's showing the same issue. below is my interface config
interface Ethernet0/0/0 no ip address ! interface Ethernet0/0/0.101 encapsulation dot1Q 101 pppoe enable group global pppoe -client dial-pool-number 1 ! interface Dialer1 description IDNet VDSL mtu 1492 ip address negotiated no ip redirects no ip unreachables no ip proxy-arp ip nbar protocol-discovery ip flow ingress ip nat outside ip virtual-reassembly in encapsulation ppp ip tcp adjust-mss 1452 dialer pool 1 ppp authentication pap chap ms-chap callin ppp chap hostname *** ppp chap password 0 *** ppp ipcp route default ppp ipcp address accept no cdp enable crypto map MAP-OUTSIDE
controller VDSL 0/0/0 operating mode vdsl2 firmware filename flash:VA_A_39h_B_38h3_24h_j.bin modem UKfeature
... View more
02-21-2017
02:30 AM
Below is the options i have
I tried to look for the UK option but couldn't seem to get it when I hit ? under modem
SM-RT-01(config-controller)#? Controller configuration commands: bitswap default description diagnostics exit firmware help modem no operating shutdown sra sync training
... View more
02-19-2017
11:37 PM
Hi,
Sorry for the late reply. I tried that along with setting the VDSL mode but still no success. Can't see the IP address on the interface. I also updated the firmware to the latest but still no success.
Thanks
Doug
... View more
02-14-2017
08:59 AM
HI Mark,
Thanks for the advise . I tried your debug commands along with some PPPoE debugs. I got the below can you tell me what it means if you can? I tried to set the IP address statically on the interface and for some odd reason it all worked fine. however, When I set it back to ip address negotiated it didn't get an IP address from the ISP.
SM-RT-01# *Feb 14 16:05:54.949: padi timer expired *Feb 14 16:05:54.949: Sending PADI: Interface = Ethernet0/0/0.101 SM-RT-01# *Feb 14 16:06:02.529: %CONTROLLER-5-UPDOWN: Controller VDSL 0/0/0, changed state to up SM-RT-01# *Feb 14 16:06:03.533: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/0/0, changed state to up SM-RT-01# SM-RT-01# SM-RT-01# *Feb 14 16:06:27.217: padi timer expired *Feb 14 16:06:27.217: Sending PADI: Interface = Ethernet0/0/0.101 SM-RT-01# *Feb 14 16:06:59.473: padi timer expired *Feb 14 16:06:59.473: Sending PADI: Interface = Ethernet0/0/0.101 SM-RT-01# *Feb 14 16:07:31.745: padi timer expired *Feb 14 16:07:31.745: Sending PADI: Interface = Ethernet0/0/0.101 SM-RT-01# *Feb 14 16:08:04.077: padi timer expired *Feb 14 16:08:04.077: Sending PADI: Interface = Ethernet0/0/0.101 SM-RT-01# *Feb 14 16:08:36.333: padi timer expired *Feb 14 16:08:36.333: Sending PADI: Interface = Ethernet0/0/0.101 SM-RT-01# *Feb 14 16:09:08.609: padi timer expired *Feb 14 16:09:08.609: Sending PADI: Interface = Ethernet0/0/0.101 SM-RT-01# *Feb 14 16:09:40.949: padi timer expired *Feb 14 16:09:40.949: Sending PADI: Interface = Ethernet0/0/0.101 SM-RT-01# *Feb 14 16:09:45.277: PPPoE 3797: I PADT R:0030.8800.0005 L:18e7.2816.2d08 101 Et0/0/0.101 SM-RT-01# *Feb 14 16:10:13.205: padi timer expired *Feb 14 16:10:13.205: Sending PADI: Interface = Ethernet0/0/0.101 *Feb 14 16:10:13.233: PPPoE 0: I PADO R:0030.8800.0005 L:e865.49fc.6288 101 Et0/0/0.101 SM-RT-01# *Feb 14 16:10:15.253: PPPOE: we've got our pado and the pado timer went off *Feb 14 16:10:15.253: OUT PADR from PPPoE Session *Feb 14 16:10:15.609: PPPoE 1575: I PADS R:0030.8800.0005 L:e865.49fc.6288 101 Et0/0/0.101 *Feb 14 16:10:15.609: IN PADS from PPPoE Session *Feb 14 16:10:15.609: %DIALER-6-BIND: Interface Vi2 bound to profile Di1 *Feb 14 16:10:15.609: PPPoE: Virtual Access interface obtained. *Feb 14 16:10:15.609: PPPoE : encap string prepared *Feb 14 16:10:15.609: [0]PPPoE 1575: data pat SM-RT-01#h set to PPPoE Client *Feb 14 16:10:15.613: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to up *Feb 14 16:10:15.613: Vi2 PPP: Sending cstate UP notification *Feb 14 16:10:15.613: Vi2 PPP: Processing CstateUp message *Feb 14 16:10:15.621: PPP: Alloc Context [30D68F80] *Feb 14 16:10:15.621: ppp1 PPP: Phase is ESTABLISHING *Feb 14 16:10:15.621: Vi2 PPP: Using dialer call direction *Feb 14 16:10:15.621: Vi2 PPP: Treating connection as a callout *Feb 14 16:10:15.621: Vi2 PPP: Session handle[ SM-RT-01#2000001] Session id[1] *Feb 14 16:10:15.621: Vi2 LCP: Event[OPEN] State[Initial to Starting] *Feb 14 16:10:15.621: Vi2 PPP: No remote authentication for call-out *Feb 14 16:10:15.621: Vi2 LCP: O CONFREQ [Starting] id 1 len 14 *Feb 14 16:10:15.621: Vi2 LCP: MRU 1492 (0x010405D4) *Feb 14 16:10:15.621: Vi2 LCP: MagicNumber 0x6742E6D7 (0x05066742E6D7) *Feb 14 16:10:15.621: Vi2 LCP: Event[UP] State[Starting to REQsent] *Feb 14 16:10:15.637: Vi2 LCP: I CONFREQ [REQsent] id 136 len 19 *Feb 14 16:10: SM-RT-01#15.637: Vi2 LCP: MRU 1492 (0x010405D4) *Feb 14 16:10:15.637: Vi2 LCP: AuthProto CHAP (0x0305C22305) *Feb 14 16:10:15.637: Vi2 LCP: MagicNumber 0x0BF21C41 (0x05060BF21C41) *Feb 14 16:10:15.637: Vi2 LCP: O CONFACK [REQsent] id 136 len 19 *Feb 14 16:10:15.637: Vi2 LCP: MRU 1492 (0x010405D4) *Feb 14 16:10:15.637: Vi2 LCP: AuthProto CHAP (0x0305C22305) *Feb 14 16:10:15.637: Vi2 LCP: MagicNumber 0x0BF21C41 (0x05060BF21C41) *Feb 14 16:10:15.637: Vi2 LCP: Event[Receive ConfReq+] State[REQs SM-RT-01#ent to ACKsent] *Feb 14 16:10:15.637: Vi2 LCP: I CONFACK [ACKsent] id 1 len 14 *Feb 14 16:10:15.637: Vi2 LCP: MRU 1492 (0x010405D4) *Feb 14 16:10:15.637: Vi2 LCP: MagicNumber 0x6742E6D7 (0x05066742E6D7) *Feb 14 16:10:15.637: Vi2 LCP: Event[Receive ConfAck] State[ACKsent to Open] *Feb 14 16:10:15.653: Vi2 PPP: Queue CHAP code[1] id[1] *Feb 14 16:10:15.661: Vi2 PPP: Phase is AUTHENTICATING, by the peer *Feb 14 16:10:15.661: Vi2 CHAP: Redirect packet to Vi2 *Feb 14 16:10:15.661: Vi2 CHAP: I CHAL SM-RT-01#LENGE id 1 len 36 from "bras-red1.gw-th" *Feb 14 16:10:15.661: Vi2 PPP: Sent CHAP SENDAUTH Request *Feb 14 16:10:15.661: Vi2 LCP: State is Open *Feb 14 16:10:15.661: Vi2 PPP: Received SENDAUTH Response FAIL *Feb 14 16:10:15.661: Vi2 CHAP: Using hostname from interface CHAP *Feb 14 16:10:15.661: Vi2 CHAP: Using password from interface CHAP *Feb 14 16:10:15.661: Vi2 CHAP: O RESPONSE id 1 len 38 from "<ISP Login username>" *Feb 14 16:10:16.177: Vi2 LCP: I CONFREQ [Open] id 107 len 19 *Feb 14 16:10:16.177 SM-RT-01#: Vi2 LCP: MRU 1492 (0x010405D4) *Feb 14 16:10:16.177: Vi2 LCP: AuthProto CHAP (0x0305C22305) *Feb 14 16:10:16.177: Vi2 LCP: MagicNumber 0x0BF21C41 (0x05060BF21C41) *Feb 14 16:10:16.177: Vi2 PPP DISC: PPP Renegotiating *Feb 14 16:10:16.177: Vi2 PPP: Sending Acct Event[Reneg] id[10] *Feb 14 16:10:16.177: PPP: NET STOP send to AAA. *Feb 14 16:10:16.177: Vi2 LCP: Event[LCP Reneg] State[Open to Open] *Feb 14 16:10:16.177: Vi2 LCP: Event[DOWN] State[Open to Starting] *Feb 14 16:10:16.177: Vi2 P SM-RT-01#PP: Phase is DOWN *Feb 14 16:10:16.181: PPP: Alloc Context [30D68DAC] *Feb 14 16:10:16.181: ppp1 PPP: Phase is ESTABLISHING *Feb 14 16:10:16.181: Vi2 PPP: Using dialer call direction *Feb 14 16:10:16.181: Vi2 PPP: Treating connection as a callout *Feb 14 16:10:16.181: Vi2 PPP: Session handle[E4000002] Session id[1] *Feb 14 16:10:16.181: Vi2 LCP: Event[OPEN] State[Initial to Starting] *Feb 14 16:10:16.181: Vi2 PPP: No remote authentication for call-out *Feb 14 16:10:16.181: Vi2 LCP: O CONFREQ [Start SM-RT-01#ing] id 1 len 14 *Feb 14 16:10:16.181: Vi2 LCP: MRU 1492 (0x010405D4) *Feb 14 16:10:16.181: Vi2 LCP: MagicNumber 0x6742E908 (0x05066742E908) *Feb 14 16:10:16.181: Vi2 LCP: Event[UP] State[Starting to REQsent] *Feb 14 16:10:16.181: Vi2 LCP: I CONFREQ [REQsent] id 107 len 19 *Feb 14 16:10:16.181: Vi2 LCP: MRU 1492 (0x010405D4) *Feb 14 16:10:16.181: Vi2 LCP: AuthProto CHAP (0x0305C22305) *Feb 14 16:10:16.181: Vi2 LCP: MagicNumber 0x0BF21C41 (0x05060BF21C41) *Feb 14 16:10:16.181: Vi2 LCP SM-RT-01#: O CONFACK [REQsent] id 107 len 19 *Feb 14 16:10:16.181: Vi2 LCP: MRU 1492 (0x010405D4) *Feb 14 16:10:16.181: Vi2 LCP: AuthProto CHAP (0x0305C22305) *Feb 14 16:10:16.181: Vi2 LCP: MagicNumber 0x0BF21C41 (0x05060BF21C41) *Feb 14 16:10:16.181: Vi2 LCP: Event[Receive ConfReq+] State[REQsent to ACKsent] *Feb 14 16:10:16.209: Vi2 LCP: I CONFACK [ACKsent] id 1 len 14 *Feb 14 16:10:16.209: Vi2 LCP: MRU 1492 (0x010405D4) SM-RT-01#6:10:16.209: Vi2 LCP: MagicNumber 0x6742E908 (0x05066742E908) *Feb 14 16:10:16.209: Vi2 LCP: Event[Receive ConfAck] State[ACKsent to Open] *Feb 14 16:10:16.209: Vi2 PPP: Queue CHAP code[1] id[1] *Feb 14 16:10:16.237: Vi2 PPP: Phase is AUTHENTICATING, by the peer *Feb 14 16:10:16.237: Vi2 CHAP: Redirect packet to Vi2 *Feb 14 16:10:16.237: Vi2 CHAP: I CHALLENGE id 1 len 32 from "bng2.th-lon" *Feb 14 16:10:16.237: Vi2 PPP: Sent CHAP SENDAUTH Request *Feb 14 16:10:16.237: Vi2 LCP: State is Open *Feb 14 16:10:16.237: Vi2 PPP: Received SENDAUTH Response FAIL *Feb SM-RT-01# 14 16:10:16.237: Vi2 CHAP: Using hostname from interface CHAP *Feb 14 16:10:16.237: Vi2 CHAP: Using password from interface CHAP *Feb 14 16:10:16.237: Vi2 CHAP: O RESPONSE id 1 len 38 from " ISP Login username> " *Feb 14 16:10:16.377: Vi2 LCP: I CONFREQ [Open] id 1 len 30 *Feb 14 16:10:16.377: Vi2 LCP: AuthProto CHAP (0x0305C22305) *Feb 14 16:10:16.377: Vi2 LCP: MagicNumber 0xD93C18BD (0x0506D93C18BD) *Feb 14 16:10:16.377: Vi2 LCP: MRRU 1524 (0x110405F4) *Feb 14 16:10:16.377: Vi2 LCP: Endpo SM-RT-01#intDisc 1 IDNetLNS (0x130B0149444E65744C4E53) *Feb 14 16:10:16.377: Vi2 PPP DISC: PPP Renegotiating *Feb 14 16:10:16.377: Vi2 PPP: Sending Acct Event[Reneg] id[11] *Feb 14 16:10:16.377: PPP: NET STOP send to AAA. *Feb 14 16:10:16.377: Vi2 LCP: Event[LCP Reneg] State[Open to Open] *Feb 14 16:10:16.381: Vi2 LCP: Event[DOWN] State[Open to Starting] *Feb 14 16:10:16.381: Vi2 PPP: Phase is DOWN *Feb 14 16:10:16.381: PPP: Alloc Context [30D68BD8] *Feb 14 16:10:16.381: ppp1 PPP: Phase is ESTABLISHING *Fe SM-RT-01#b 14 16:10:16.381: Vi2 PPP: Using dialer call direction *Feb 14 16:10:16.381: Vi2 PPP: Treating connection as a callout *Feb 14 16:10:16.381: Vi2 PPP: Session handle[CA000003] Session id[1] *Feb 14 16:10:16.381: Vi2 LCP: Event[OPEN] State[Initial to Starting] *Feb 14 16:10:16.381: Vi2 PPP: No remote authentication for call-out *Feb 14 16:10:16.381: Vi2 LCP: O CONFREQ [Starting] id 1 len 14 *Feb 14 16:10:16.381: Vi2 LCP: MRU 1492 (0x010405D4) *Feb 14 16:10:16.381: Vi2 LCP: MagicNumber 0x6742E9D SM-RT-01#1 (0x05066742E9D1) *Feb 14 16:10:16.381: Vi2 LCP: Event[UP] State[Starting to REQsent] *Feb 14 16:10:16.381: Vi2 LCP: I CONFREQ [REQsent] id 1 len 30 *Feb 14 16:10:16.381: Vi2 LCP: AuthProto CHAP (0x0305C22305) *Feb 14 16:10:16.381: Vi2 LCP: MagicNumber 0xD93C18BD (0x0506D93C18BD) *Feb 14 16:10:16.381: Vi2 LCP: MRRU 1524 (0x110405F4) *Feb 14 16:10:16.381: Vi2 LCP: EndpointDisc 1 IDNetLNS (0x130B0149444E65744C4E53) *Feb 14 16:10:16.381: Vi2 LCP: O CONFREJ [REQsent] id 1 len 8 *Feb 14 16: SM-RT-01#10:16.381: Vi2 LCP: MRRU 1524 (0x110405F4) *Feb 14 16:10:16.381: Vi2 LCP: Event[Receive ConfReq-] State[REQsent to REQsent] *Feb 14 16:10:16.409: Vi2 LCP: I CONFNAK [REQsent] id 1 len 8 *Feb 14 16:10:16.409: Vi2 LCP: MRU 1500 (0x010405DC) *Feb 14 16:10:16.409: Vi2 LCP: O CONFREQ [REQsent] id 2 len 14 *Feb 14 16:10:16.409: Vi2 LCP: MRU 1500 (0x010405DC) *Feb 14 16:10:16.409: Vi2 LCP: MagicNumber 0x6742E9D1 (0x05066742E9D1) *Feb 14 16:10:16.409: Vi2 LCP: Event[Receive ConfNak/Rej] State[RE SM-RT-01#Qsent to REQsent] *Feb 14 16:10:16.409: Vi2 LCP: I CONFREQ [REQsent] id 2 len 26 *Feb 14 16:10:16.409: Vi2 LCP: AuthProto CHAP (0x0305C22305) *Feb 14 16:10:16.409: Vi2 LCP: MagicNumber 0xD93C18BD (0x0506D93C18BD) *Feb 14 16:10:16.409: Vi2 LCP: EndpointDisc 1 IDNetLNS (0x130B0149444E65744C4E53) *Feb 14 16:10:16.409: Vi2 LCP: O CONFACK [REQsent] id 2 len 26 *Feb 14 16:10:16.409: Vi2 LCP: AuthProto CHAP (0x0305C22305) *Feb 14 16:10:16.409: Vi2 LCP: MagicNumber 0xD93C18BD (0x0506D93C18BD) SM-RT-01# *Feb 14 16:10:16.409: Vi2 LCP: EndpointDisc 1 IDNetLNS (0x130B0149444E65744C4E53) *Feb 14 16:10:16.409: Vi2 LCP: Event[Receive ConfReq+] State[REQsent to ACKsent] *Feb 14 16:10:16.433: Vi2 LCP: I CONFACK [ACKsent] id 2 len 14 *Feb 14 16:10:16.433: Vi2 LCP: MRU 1500 (0x010405DC) *Feb 14 16:10:16.433: Vi2 LCP: MagicNumber 0x6742E9D1 (0x05066742E9D1) *Feb 14 16:10:16.433: Vi2 LCP: Event[Receive ConfAck] State[ACKsent to Open] *Feb 14 16:10:16.453: Vi2 PPP: Queue CHAP code[1] id[2] *Feb 14 16 SM-RT-01#:10:16.461: Vi2 PPP: Phase is AUTHENTICATING, by the peer *Feb 14 16:10:16.461: Vi2 CHAP: Redirect packet to Vi2 *Feb 14 16:10:16.461: Vi2 CHAP: I CHALLENGE id 2 len 29 from "IDNetLNS" *Feb 14 16:10:16.461: Vi2 PPP: Sent CHAP SENDAUTH Request *Feb 14 16:10:16.461: Vi2 LCP: State is Open *Feb 14 16:10:16.461: Vi2 PPP: Received SENDAUTH Response FAIL *Feb 14 16:10:16.461: Vi2 CHAP: Using hostname from interface CHAP *Feb 14 16:10:16.461: Vi2 CHAP: Using password from interface CHAP *Feb 14 16:10:16.4 SM-RT-01#61: Vi2 CHAP: O RESPONSE id 2 len 38 from " ISP Login username> " *Feb 14 16:10:16.521: Vi2 CHAP: I SUCCESS id 2 len 4 *Feb 14 16:10:16.521: Vi2 PPP: Phase is FORWARDING, Attempting Forward *Feb 14 16:10:16.521: Vi2 PPP: Queue IPCP code[1] id[1] *Feb 14 16:10:16.521: Vi2 PPP: Queue IPV6CP code[1] id[1] *Feb 14 16:10:16.521: Vi2 PPP: Phase is ESTABLISHING, Finish LCP *Feb 14 16:10:16.521: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access2, changed state to up *Feb 14 16:10:16.525: Vi2 PPP: N SM-RT-01#o AAA accounting method list *Feb 14 16:10:16.525: Vi2 PPP: Phase is UP *Feb 14 16:10:16.525: Vi2 IPCP: Protocol configured, start CP. state[Initial] *Feb 14 16:10:16.525: Vi2 IPCP: Event[OPEN] State[Initial to Starting] *Feb 14 16:10:16.525: Vi2 IPCP: O CONFREQ [Starting] id 1 len 10 *Feb 14 16:10:16.525: Vi2 IPCP: Address 0.0.0.0 (0x030600000000) *Feb 14 16:10:16.525: Vi2 IPCP: Event[UP] State[Starting to REQsent] *Feb 14 16:10:16.525: Vi2 PPP: Process pending ncp packets *Feb 14 16:10:16.525 SM-RT-01#: Vi2 IPCP: Redirect packet to Vi2 *Feb 14 16:10:16.525: Vi2 IPCP: I CONFREQ [REQsent] id 1 len 10 *Feb 14 16:10:16.525: Vi2 IPCP: Address 212.69.63.105 (0x0306D4453F69) *Feb 14 16:10:16.525: Vi2 IPCP: Accept the peer address 212.69.63.105 *Feb 14 16:10:16.525: Vi2 IPCP: O CONFACK [REQsent] id 1 len 10 *Feb 14 16:10:16.525: Vi2 IPCP: Address 212.69.63.105 (0x0306D4453F69) *Feb 14 16:10:16.525: Vi2 IPCP: Event[Receive ConfReq+] State[REQsent to ACKsent] *Feb 14 16:10:16.525: Vi2 IPV6CP: Redirec SM-RT-01#t packet to Vi2 *Feb 14 16:10:16.525: Vi2 PPP: Control packet rate limit 10 reached *Feb 14 16:10:16.525: Vi2 PPP: Entering block state for 30 seconds *Feb 14 16:10:16.525: Vi2 PPP: Packet throttled, Dropping packet *Feb 14 16:10:16.549: Vi2 PPP: Packet throttled, Dropping packet *Feb 14 16:10:31.493: Vi2 PPP: Packet throttled, Dropping packet *Feb 14 16:10:31.493: Vi2 PPP: Packet throttled, Dropping packet SM-RT-01# *Feb 14 16:10:38.669: Vi2 IPCP: O CONFREQ [ACKsent] id 2 len 10 *Feb 14 16:10:38.669: Vi2 IPCP: Address 0.0.0.0 (0x030600000000) *Feb 14 16:10:38.669: Vi2 IPCP: Event[Timeout+] State[ACKsent to ACKsent] *Feb 14 16:10:38.693: Vi2 PPP: Packet throttled, Dropping packet SM-RT-01# *Feb 14 16:10:40.685: Vi2 IPCP: O CONFREQ [ACKsent] id 3 len 10 *Feb 14 16:10:40.685: Vi2 IPCP: Address 0.0.0.0 (0x030600000000) *Feb 14 16:10:40.685: Vi2 IPCP: Event[Timeout+] State[ACKsent to ACKsent] *Feb 14 16:10:40.709: Vi2 PPP: Packet throttled, Dropping packet SM-RT-01# *Feb 14 16:10:42.701: Vi2 IPCP: O CONFREQ [ACKsent] id 4 len 10 *Feb 14 16:10:42.701: Vi2 IPCP: Address 0.0.0.0 (0x030600000000) *Feb 14 16:10:42.701: Vi2 IPCP: Event[Timeout+] State[ACKsent to ACKsent] *Feb 14 16:10:42.725: Vi2 PPP: Packet throttled, Dropping packet SM-RT-01# *Feb 14 16:10:44.717: Vi2 IPCP: O CONFREQ [ACKsent] id 5 len 10 *Feb 14 16:10:44.717: Vi2 IPCP: Address 0.0.0.0 (0x030600000000) *Feb 14 16:10:44.717: Vi2 IPCP: Event[Timeout+] State[ACKsent to ACKsent] *Feb 14 16:10:44.741: Vi2 PPP: Packet throttled, Dropping packet SM-RT-01# *Feb 14 16:10:46.501: Vi2 PPP: Packet throttled, Dropping packet *Feb 14 16:10:46.501: Vi2 PPP: Packet throttled, Dropping packet *Feb 14 16:10:46.733: Vi2 IPCP: O CONFREQ [ACKsent] id 6 len 10 *Feb 14 16:10:46.733: Vi2 IPCP: Address 0.0.0.0 (0x030600000000) *Feb 14 16:10:46.733: Vi2 IPCP: Event[Timeout+] State[ACKsent to ACKsent] *Feb 14 16:10:46.757: Vi2 IPCP: I CONFREJ [ACKsent] id 6 len 10 *Feb 14 16:10:46.757: Vi2 IPCP: Address 0.0.0.0 (0x030600000000) *Feb 14 16:10:46.757: Vi2 IPCP: O SM-RT-01#CONFREQ [ACKsent] id 7 len 4 *Feb 14 16:10:46.757: Vi2 IPCP: Event[Receive ConfNak/Rej] State[ACKsent to ACKsent] *Feb 14 16:10:46.781: Vi2 IPCP: I CONFACK [ACKsent] id 7 len 4 *Feb 14 16:10:46.781: Vi2 IPCP: Event[Receive ConfAck] State[ACKsent to Open] *Feb 14 16:10:46.797: Vi2 IPCP: State is Open *Feb 14 16:10:46.797: Di1 Added to neighbor route AVL tree: topoid 0, address <ISP gateway IP> *Feb 14 16:10:46.797: Di1 IPCP: Install route to 212.69.63.105 SM-RT-01# *Feb 14 16:11:01.509: Vi2 IPCP: I CONFREQ [Open] id 4 len 10 *Feb 14 16:11:01.509: Vi2 IPCP: Address <ISP IP address> (0x0306D4453F69) *Feb 14 16:11:01.509: Vi2 IPCP: Accept the peer address 212.69.63.105 *Feb 14 16:11:01.509: Vi2 IPCP: O CONFREQ [Open] id 8 len 10 *Feb 14 16:11:01.509: Vi2 IPCP: Address 0.0.0.0 (0x030600000000) *Feb 14 16:11:01.509: Vi2 IPCP: O CONFACK [Open] id 4 len 10 *Feb 14 16:11:01.509: Vi2 IPCP: Address 212.69.63.105 (0x0306D4453F69) *Feb 14 16:11:01.509: Vi2 IPCP: E SM-RT-01#vent[Receive ConfReq+] State[Open to ACKsent] *Feb 14 16:11:01.509: Vi2 IPV6CP: I CONFREQ [UNKNOWN] id 4 len 14 *Feb 14 16:11:01.509: Vi2 IPV6CP: Interface-Id 1EDF:0FFF:FE25:5118 (0x010A1EDF0FFFFE255118) *Feb 14 16:11:01.509: Vi2 LCP: O PROTREJ [Open] id 3 len 20 protocol IPV6CP (0x0104000E010A1EDF0FFFFE255118) *Feb 14 16:11:01.509: Di1 Deleted neighbor route from AVL tree: topoid 0, address <ISP IP address> *Feb 14 16:11:01.509: Di1 IPCP: Remove route to <ISP IP address> *Feb 14 16:11:01.533: Vi2 IPCP: SM-RT-01# I CONFREJ [ACKsent] id 8 len 10 *Feb 14 16:11:01.533: Vi2 IPCP: Address 0.0.0.0 (0x030600000000) *Feb 14 16:11:01.533: Vi2 IPCP: O CONFREQ [ACKsent] id 9 len 4 *Feb 14 16:11:01.533: Vi2 IPCP: Event[Receive ConfNak/Rej] State[ACKsent to ACKsent] *Feb 14 16:11:01.561: Vi2 IPCP: I CONFACK [ACKsent] id 9 len 4 *Feb 14 16:11:01.561: Vi2 IPCP: Event[Receive ConfAck] State[ACKsent to Open] *Feb 14 16:11:01.581: Vi2 IPCP: State is Open *Feb 14 16:11:01.581: Di1 Added to neighbor route AVL tree: topoid 0 SM-RT-01#, address 212.69.63.105 *Feb 14 16:11:01.581: Di1 IPCP: Install route to <Route TO ISP gateway> SM-RT-01#
... View more
Created by
DOUGLAS DRURY
in Switching
in Switching
02-13-2017
11:37 PM
02-13-2017
11:37 PM
Hi All,
One morning my client said they had no internet when I got there Dialer1 had no IP address. I tried disconnecting the DSL cable, shutting down the Dialer1 then no shut, also tried rebooting the router with no success. I called the provider they said the router logging in fine and was given the correct IP.
Looking at my config it hasn't changed. I quickly setup and CIsco 887VA and it connected fine and got an IP. The router they should have is a Cisco 1921 with a VDSL wic card
Any suggestions as to why the Dialer1 isn't getting an IP?
Below is the POST output during bootup
System Bootstrap, Version 15.0(1r)M16, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport Copyright (c) 2012 by cisco Systems, Inc.
Total memory size = 512 MB CISCO1921/K9 platform with 524288 Kbytes of main memory Main memory is configured to 64 bit mode with ECC disabled
Readonly ROMMON initialized program load complete, entry point: 0x80903000, size: 0x4c4a0 program load complete, entry point: 0x80903000, size: 0x4c4a0
IOS Image Load Test ___________________ Digitally Signed Release Software program load complete, entry point: 0x81000000, size: 0x481ac1c Self decompressing the image : ######################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################### [OK]
Smart Init is enabled smart init is sizing iomem TYPE MEMORY_REQ HWIC Slot 0 0x00200000 Onboard devices & buffer pools 0x01E8F000 ----------------------------------------------- TOTAL: 0x0208F000
Rounded IOMEM up to: 36MB. Using 7 percent iomem. [36MB/512MB]
Restricted Rights Legend
Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS sec. 252.227-7013.
cisco Systems, Inc. 170 West Tasman Drive San Jose, California 95134-1706
Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.4(3)M3, RELEASE SOFTWARE (fc2) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2015 by Cisco Systems, Inc. Compiled Fri 05-Jun-15 12:31 by prod_rel_team
This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to export@cisco.com.
Installed image archive Cisco CISCO1921/K9 (revision 1.0) with 487424K/36864K bytes of memory. Processor board ID FCZ19356133 1 DSL controller 1 Ethernet interface 2 Gigabit Ethernet interfaces 1 ATM interface 1 terminal line 1 Virtual Private Network (VPN) Module DRAM configuration is 64 bits wide with parity disabled. 255K bytes of non-volatile configuration memory. 250864K bytes of USB Flash usbflash0 (Read/Write)
SETUP: new interface NVI0 placed in "shutdown" state
Press RETURN to get started!
*Jan 2 00:00:02.559: %IOS_LICENSE_IMAGE_APPLICATION-6-LICENSE_LEVEL: Module name = c1900 Next reboot level = ipbasek9 and License = ipbasek9 *Jan 2 00:00:02.779: %IOS_LICENSE_IMAGE_APPLICATION-6-LICENSE_LEVEL: Module name = c1900 Next reboot level = securityk9 and License = securityk9 *Feb 14 06:59:19.171: c3600_scp_set_dstaddr2_idb(184)add = 80 name is Embedded-Service-Engine0/0 *Feb 14 06:59:29.291: %CTS-6-ENV_DATA_START_STATE: Environment Data Download in start state *Feb 14 06:59:32.347: %PA-3-PA_INIT_FAILED: Performance Agent failed to initialize (Missing Data License) *Feb 14 06:59:32.375: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0 State changed to: Initialized *Feb 14 06:59:32.379: %VPN_HW-6-INFO_LOC: Crypto engine: onboard 0 State changed to: Enabled *Feb 14 06:59:37.283: %LINK-5-CHANGED: Interface GigabitEthernet0/0, changed state to reset *Feb 14 06:59:37.283: %LINK-5-CHANGED: Interface GigabitEthernet0/1, changed state to reset *Feb 14 06:59:37.283: %LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0/0/0, changed state to down *Feb 14 06:59:38.283: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0, changed state to down *Feb 14 06:59:38.283: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to down *Feb 14 06:59:39.399: %LINK-3-UPDOWN: Interface GigabitEthernet0/0, changed state to down *Feb 14 06:59:39.399: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to down *Feb 14 06:59:42.487: %USBFLASH-5-CHANGE: usbflash0 has been inserted! *Feb 14 06:59:45.867: %SYS-5-CONFIG_I: Configured from memory by console *Feb 14 06:59:46.243: %LINEPROTO-5-UPDOWN: Line protocol on Interface NVI0, changed state to down *Feb 14 06:59:47.235: %LINK-5-CHANGED: Interface Embedded-Service-Engine0/0, changed state to administratively down *Feb 14 06:59:47.235: %LINK-5-CHANGED: Interface GigabitEthernet0/0, changed state to administratively down *Feb 14 06:59:47.743: %LINK-5-CHANGED: Interface ATM0/0/0, changed state to administratively down *Feb 14 06:59:47.887: %LINK-5-CHANGED: Interface NVI0, changed state to administratively down *Feb 14 06:59:48.255: %LINEPROTO-5-UPDOWN: Line protocol on Interface Embedded-Service-Engine0/0, changed state to down *Feb 14 06:59:49.387: %SYS-5-RESTART: System restarted -- Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.4(3)M3, RELEASE SOFTWARE (fc2) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2015 by Cisco Systems, Inc. Compiled Fri 05-Jun-15 12:31 by prod_rel_team *Feb 14 06:59:49.443: %SSH-5-ENABLED: SSH 1.99 has been enabled *Feb 14 06:59:50.287: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF *Feb 14 06:59:50.287: %CRYPTO-6-GDOI_ON_OFF: GDOI is OFF *Feb 14 06:59:50.287: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF *Feb 14 06:59:50.287: %CRYPTO-6-GDOI_ON_OFF: GDOI is OFF *Feb 14 06:59:50.291: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is ON *Feb 14 06:59:50.495: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access1, changed state to up *Feb 14 06:59:50.495: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up *-RT-01>
Below is a copy of the config
<REMOVED>#sh run br Building configuration...
Current configuration : 5116 bytes ! version 15.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname <REMOVED> ! boot-start-marker boot-end-marker ! ! <REMOVED> ! aaa new-model ! ! aaa authentication login VPNUSERSAUTH local aaa authorization network VPNUSERS local ! ! ! ! ! aaa session-id common ! ! ! ! ! ! ! ! ! ! ! ip dhcp excluded-address 192.168.20.1 192.168.20.10 ip dhcp excluded-address 192.168.20.200 192.168.20.254 ! ip dhcp pool Data-POOL network 192.168.20.0 255.255.255.0 default-router 192.168.20.1 dns-server 192.168.20.1 8.8.8.8 domain-name <REMOVED>.local lease 0 6 ! ! ! ip domain name scanmar.local ip host SM-RT-01 192.168.20.1 ip host SM-SW-01 192.168.20.202 ip host SM-UCME-01 192.168.20.203 ip host scm-dc02 10.1.1.72 ip name-server 8.8.8.8 ip name-server 10.1.1.71 ip cef no ipv6 cef ! multilink bundle-name authenticated ! cts logging verbose ! crypto pki trustpoint TP-self-signed-2519245229 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-2519245229 revocation-check none rsakeypair TP-self-signed-2519245229 ! ! crypto pki certificate chain TP-self-signed-2519245229 certificate self-signed 01 license udi pid CISCO1921/K9 sn FCZ19356133 ! ! <REMOVED> ! redundancy ! ! ! ! ! controller VDSL 0/0/0 ! ! ! crypto isakmp policy 1 encr aes 256 authentication pre-share group 5 ! crypto isakmp policy 7 encr 3des hash md5 authentication pre-share group 2 crypto isakmp key <REMOVED> address <REMOVED> no-xauth ! crypto isakmp client configuration group VPNUSERS key R0vB0t dns 192.168.1.201 domain scanmar.local pool VPN-POOL acl VPNSPLIT ! ! crypto ipsec transform-set <REMOVED> esp-aes 256 esp-sha-hmac mode tunnel ! ! ! crypto dynamic-map VPNDYNMAP 1 set transform-set SCANMAR reverse-route ! ! crypto map MAP-OUTSIDE client authentication list VPNUSERSAUTH crypto map MAP-OUTSIDE isakmp authorization list VPNUSERS crypto map MAP-OUTSIDE client configuration address respond crypto map MAP-OUTSIDE 1 ipsec-isakmp dynamic VPNDYNMAP crypto map MAP-OUTSIDE 10 ipsec-isakmp set peer <REMOVED> set transform-set <REMOVED> set pfs group5 match address S2S ! ! ! ! ! interface Embedded-Service-Engine0/0 no ip address shutdown ! interface GigabitEthernet0/0 description NOT IN USE no ip address shutdown duplex auto speed auto ! interface GigabitEthernet0/1 no ip address duplex auto speed auto ! interface GigabitEthernet0/1.20 description Corporate_LAN encapsulation dot1Q 20 ip address 192.168.20.1 255.255.255.0 ip nat inside ip virtual-reassembly in ! interface GigabitEthernet0/1.30 description Voice_LAN encapsulation dot1Q 30 ip address 192.168.30.1 255.255.255.0 ip nat inside ip virtual-reassembly in ! interface ATM0/0/0 no ip address shutdown no atm ilmi-keepalive ! interface Ethernet0/0/0 no ip address ! interface Ethernet0/0/0.101 encapsulation dot1Q 101 pppoe enable group global pppoe-client dial-pool-number 1 ! interface Dialer1 description IDNet VDSL mtu 1492 ip address negotiated no ip redirects no ip unreachables no ip proxy-arp ip nbar protocol-discovery ip flow ingress ip nat outside ip virtual-reassembly in encapsulation ppp ip tcp adjust-mss 1452 dialer pool 1 ppp authentication pap chap ms-chap callin ppp chap hostname <REMOVED> ppp chap password 0 <REMOVED> ppp ipcp address accept no cdp enable crypto map MAP-OUTSIDE ! ip local pool VPN-POOL 11.1.74.5 11.1.74.250 ip forward-protocol nd ! ip http server ip http authentication local ip http secure-server ! ip nat inside source list NAT interface Dialer1 overload ip route 0.0.0.0 0.0.0.0 Dialer1 ip route 192.168.30.3 255.255.255.255 192.168.30.2 ! ip access-list extended NAT deny ip 192.168.20.0 0.0.0.255 10.1.0.0 0.0.255.255 deny ip 192.168.20.0 0.0.0.255 11.1.74.0 0.0.0.255 deny ip 192.168.30.0 0.0.0.255 11.1.74.0 0.0.0.255 permit ip 192.168.20.0 0.0.0.255 any permit ip 192.168.30.0 0.0.0.255 any ip access-list extended S2S permit ip 192.168.20.0 0.0.0.255 10.1.0.0 0.0.255.255 ip access-list extended VPNSPLIT permit ip 192.168.20.0 0.0.0.255 11.1.74.0 0.0.0.255 permit ip 192.168.30.0 0.0.0.255 11.1.74.0 0.0.0.255 ! ! ! ! ! ! control-plane ! ! banner login ^C ***************************************************************************
This Switch is the property of <REMOVED>
Unauthorized access to this router is prohibited
This router is managed and supported by <REMOVED>
If you are not authorized you are obligated to disconnect now!
*************************************************************************** ^C ! line con 0 logging synchronous line aux 0 line 2 no activation-character no exec transport preferred none transport output pad telnet rlogin lapb-ta mop udptn v120 ssh stopbits 1 line vty 0 4 exec-timeout 30 0 privilege level 15 transport input telnet ssh transport output telnet ssh ! scheduler allocate 20000 1000 ! end
<REMOVED>#
Thanks
... View more
Labels:
08-12-2016
12:03 AM
Hi,
I did mange to fix this. I noticed that the Dialer interfaces where set to no ip address, that's why i wasn't getting my ip address from the provider. I changed it to the below and all worked fine.
interface Dialer2
ip address negotiated
Hope that help you out
... View more
07-18-2019
A 3rd party has asked me to open a range of ports for a new phone system
they are installing. Howeve...
11-10-2017
Hi, Thanks for your help so far. I tried to add shape average 20000000
in the parent policy but the ...
11-10-2017
Hi, I tried your suggestion and got the below for each of the
interfaces. It hasn't applied to any o...
11-10-2017
Hi, I couldn't apply it to the dialer interface anyway because the
router rejected the command with ...
11-10-2017
Thanks for the reply. I'm using IOS: System image file is
"flash:c880data-universalk9-mz.153-3.M9.bi...
11-09-2017
Hi All. I’m looking for some help with SIP/VOIP prioritization on my
Cisco 887va. We have a remotely...
03-01-2017
Can anybody offer up some advide as to how to fix this problem. I've
erased the config and started a...
02-23-2017
Hi, I added in the uk modem options however, still no success in getting
an IP address. the router i...
02-21-2017
Below is the options i have I tried to look for the UK option but
couldn't seem to get it when I hit...
02-19-2017
Hi, Sorry for the late reply. I tried that along with setting the VDSL
mode but still no success. Ca...
02-14-2017
HI Mark, Thanks for the advise. I tried your debug commands along with
some PPPoE debugs. I got the ...
Created by
DOUGLAS DRURY
in Switching
02-13-2017
02-13-2017
Hi All, One morning my client said they had no internet when I got there
Dialer1 had no IP address. ...
Public Statistics
| Date Registered | 07-22-2012 12:44 AM |
| Date Last Visited | 07-25-2019 04:12 AM |
| Total Messages Posted | 107 |
| Total Helpful Votes Received | 5 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 3 | |
| 20 | |
| 5 | |
| 5 | |
| 5 |
.png "Arumugam Muthaiah"){kind=avatar}
.jpg "Hall of Fame Master"){kind=icon}
