Dialer not starting dial-out

[balsutiev.s]

Dear sirs,

Can you help me with resolving - why Cisco2600's Dialer not starting dial-out when packets to netwrok behind it are apperaing at router?

Here is configuration:

chat-script wavecom-gprs ABORT ERROR ABORT BUSY "" "AT" OK "ATDT \T" TIMEOUT 20 CONNECT \c

# it's gprs modem dialing string

modemcap entry wave-

conf:MSC=&F+CGDCONT=1,"IP","PSG.NW"&+CGATT=1

call rsvp-sync

!

controller E1 1/0

!

interface FastEthernet0/0

ip address 10.10.10.1 255.255.255.0

no ip redirects

no ip proxy-arp

no ip route-cache

no ip mroute-cache

no keepalive

duplex auto

speed auto

no cdp enable

!

#Here is modem connected, configured and tested

interface Async65

ip address negotiated # (I'd like to get IP for inetrface from access server)

encapsulation ppp

dialer in-band

dialer pool-member 1

async default routing

!

interface Dialer0

ip address negotiated # (I'd like to get IP for inetrface from access server)

encapsulation ppp

dialer pool 1

dialer idle-timeout 900

dialer string "*99***1#" # (Normal dialing string for GPRS modem)

dialer-group 1

no cdp enable

!

ip classless

ip route 0.0.0.0 0.0.0.0 Dialer0

no ip http server

!

IP I have to get after dialing-out is 10.168.103.õ. If I try to ping 10.168.103.2 - no connection to modem is accured, so no dialer interface is up. (I swtiched on debug confmodem, modem, dialer, ppp negotiation).

So, the question - if i something misconfigured?

Thank you in advance!

Stanislav

[Richard Burts]

I see under interface Dialer 0 you have configured dialer-group 1. This should point to dialer-list 1 but I do not see dialer-list 1. If you do not have dialer-list 1 configured, then this is your problem. If you have one and neglected to include it in your post then please give us a more complete look at what you have configured.

HTH

Rick

[balsutiev.s]

Hello!

Thank you for attention!

Here is the full config from router:

I attached full config + debug from all dialing procedure.

I hope it could help you to help me !

Stanislav

Building configuration...

Current configuration : 1762 bytes

!

version 12.2

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname wavec-router

!

logging buffered 4096 debugging

enable secret xxxxx

enable password test1

!

username test password 0 test

clock timezone MSK 3

clock summer-time MSD recurring last Sun Mar 2:00 last Sun Oct 2:00

ip subnet-zero

no ip rcmd domain-lookup

!

!

!

ip audit po max-events 100

!

chat-script wavecom-gprs ABORT ERROR ABORT BUSY "" "AT" OK "ATDT\T" TIMEOUT 20 CONNECT \c

chat-script wave-pdp "" "AT" OK "ATDT\T" TIMEOUT 20 CONNECT \c

modemcap entry wave-conf:MSC=+CGDCONT=1,"IP","PSG.NW"

modemcap entry wave-att:MSC=+CGATT=1

no call rsvp-sync

!

!

!

!

!

!

controller E1 1/0

!

!

!

interface FastEthernet0/0

ip address 10.10.10.1 255.255.255.0

ip access-group 100 in

ip access-group 100 out

no ip redirects

no ip proxy-arp

no ip route-cache

no ip mroute-cache

no keepalive

duplex auto

speed auto

no cdp enable

!

interface Async65

no ip address

encapsulation ppp

dialer in-band

dialer pool-member 1

async default routing

!

interface Dialer0

ip address negotiated

encapsulation ppp

dialer pool 1

dialer idle-timeout 900

dialer string "*99***1#"

dialer-group 1

no cdp enable

!

ip classless

ip route 0.0.0.0 0.0.0.0 Dialer0

no ip http server

--More-- !

access-list 100 permit ip any any

access-list 100 permit icmp any any log-input

dialer-list 1 protocol ip permit

no cdp run

!

!

dial-peer cor custom

!

!

!

!

!

line con 0

exec-timeout 0 0

speed 115200

line aux 0

exec-timeout 0 0

script dialer wave-pdp

modem InOut

modem autoconfigure type wave-att

transport input all

stopbits 1

speed 115200

flowcontrol hardware

line vty 0 4

exec-timeout 0 0

login local

!

end

After I put dilaer-list router started do bring up Dialer0, connect to modem, and even wrote dial was OK, but as I can see no dialing was made.

[Richard Burts]

Stanislav

It looks to me like your original problem was in not having dialer-list. Now that you have added it the router is making more progress. In looking at the debug output it looks to me like the device to which you are calling wants to do authentication but your router is not configured to do authentication. The LCP negotiation does finally finish without authentication but the IPCP phase does not negotiate an IP address. I wonder if that is a result of having done no authentication?

I would suggest that you check with the other device to get definition of whether to use pap or chap for authentication, and what ID and password to use and then to configure the appropriate authentication on your router.

HTH

Rick

[balsutiev.s]

Rcik

Could you point me at which interface should i configure "ppp authentication" - async or dialer? And also, how to put username and password there?

I tried to set "ppp authentication pap" to Async65 and allow all users at my Radius, but no packets come from Cisco router.

Best regards,

Stas

[Richard Burts]

I would configure ppp authentication under both the async and the dialer interface.

The simple solution for username is to use the username command to specify the ID and password for the other machine you are connecting to. (username password

Your message mentions allow all users at my Radius. I have used Radius to authenticate dial-in users and this requires configuration of aaa on the router. The configuration you supplied does not have any aaa in it. I would suggest that first you concentrate on getting the dial connection to work correctly. Then if you want to introduce Radius you can work on that part.

HTH

Rick

[balsutiev.s]

Hello Rick!

Thank you for help!

Here is attached log with new config and debug messages. I put ppp authentication pap to both Async and Dialer. Also set username test and password test.

But when dialing out router still don't use username&password and dialing failed.

Stanislav

[Richard Burts]

I have looked at the updated config file. I do not believe that the configured username:

username test password 0 test

will work, unless the host name on the machine that you are dialing happens to be test. For pap authentication to work you should have a username defined which is the host name of the other machine. And the other machine needs to have a username defined which is the same as your host name (wavec-router).

But I believe that there is some problem other than how the username is defined because I do not see in the debug messages that the machines ever get to the authentication stage. They seem to get hung up in the ppp negotiation. Would it be possible to post the configuration of the other machine?

HTH

Rick

[Kevin Dorrell]

It is strange. It does seem to be a problem with the LCP negotiation of the authentication protocol. I see that both the dialer profile and the physical interface of wavec-router are configured ppp authentication chap. The remote says "CONFREQ - I want to authenticate using PAP", but wavec-router says "CONFNAK - No, I want to talk CHAP". That seems to be inconsistent with what we see in the config. Why should the router be insisting on CHAP when it has been configured to use PAP? Could it be a bug?

Kevin Dorrell

Luxembourg

[Kevin Dorrell]

Rick,

The nearest bug I find to this behavior is CSCdk02077, but it describes exactly the converse of what we are seeing.

http://www.cisco.com/cgi-bin/Support/Bugtool/onebug.pl?bugid=CSCdk02077

Do you think it could be something similar, or a side-effect of an attempt to fix CSCdk02077?

Kevin Dorrell

Luxembourg

[y-talibi]

Hi sir,

i have similar probleme with Cisco1721 and wavecom modem. i want to know if you solved the probleme.

if yes, pls send me the configuration.

Thank you in advance.

Youssef

[y-talibi]

Hi sir,

i have similar probleme with Cisco1721 and wavecom modem. i want to know if you solved the probleme.

if yes, pls send me the configuration.

Thank you in advance.

Youssef

[y-talibi]

I have resolved the problem when i use auxiliar port.

i think you have a problem with serial cable.which cable are you using?

here is the configuration:

Router#sh run

Building configuration...

Current configuration : 1810 bytes

!

version 12.3

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname Router

!

boot-start-marker

boot-end-marker

!

enable password 1234

!

mmi polling-interval 60

no mmi auto-configure

no mmi pvc

mmi snmp-timeout 180

no aaa new-model

ip subnet-zero

!

!

!

ip cef

!

chat-script wavecom-gprs ABORT ERROR ABORT BUSY "" "AT" OK "ATDT\T" TIMEOUT 20 C

ONNECT \c

chat-script wave-pdp "" "AT" OK "ATDT\T" TIMEOUT 20 CONNECT \c

modemcap entry wave-att:MSC=+CGATT=1

modemcap entry wave-conf:MSC=+CGDCONT=1,"IP","ABCD"

!

!

!

interface Loopback0

ip address 100.1.1.1 255.255.255.255

!

interface FastEthernet0

ip address 192.168.0.1 255.255.255.0

ip nat inside

speed auto

!

interface Serial0

no ip address

!

interface Async5

description connected to Dial-inPCs(modem)_1

ip unnumbered FastEthernet0

encapsulation ppp

no ip route-cache cef

no ip route-cache

ip tcp header-compression passive

dialer in-band

dialer pool-member 2

async mode interactive

!

interface Dialer1

no ip address

encapsulation ppp

no cdp enable

!

interface Dialer2

ip address negotiated

ip nat outside

encapsulation ppp

no ip route-cache cef

no ip route-cache

ip tcp header-compression passive

dialer pool 2

dialer string "*99***1#"

dialer-group 1

no cdp enable

ppp authentication pap callin

ppp pap sent-username ***** password ******

!

ip nat inside source list 1 interface Dialer2 overload

ip classless

ip route 0.0.0.0 0.0.0.0 Dialer2

no ip http server

!

access-list 1 permit any

dialer-list 1 protocol ip permit

!

line con 0

line aux 0

exec-timeout 0 0

script dialer wave-pdp

modem InOut

modem autoconfigure type wave-att

transport input all

stopbits 1

speed 57600

flowcontrol hardware

line vty 0 4

password 1234

login

!

!

end

Good luck.