ASR 1001 Problem with pppoe all pages ping but do not open.

[Enea Mertiri]

interface Virtual-Template1
description PPPOE
mtu 1492
ip dhcp client lease 1 0 0
ip unnumbered Loopback0
no ip redirects
no ip proxy-arp
ip nat inside
ip tcp adjust-mss 1452
no logging event link-status
peer default ip address dhcp-pool PPPOE
ppp mtu adaptive
ppp authentication pap chap PPPOE
ppp authorization PPPOE
ppp accounting PPPOE
ppp ipcp dns 217.24.241.205 217.24.241.206
!
interface Dialer1
!
router bgp 65007
bgp log-neighbor-changes
neighbor 172.17.3.1 remote-as 65000
neighbor 172.17.5.1 remote-as 65000
!
address-family ipv4
network 79.106.185.0 mask 255.255.255.240
network 79.106.226.0 mask 255.255.255.224
network 79.106.226.32 mask 255.255.255.248
network 79.106.226.40 mask 255.255.255.252
network 79.106.226.48 mask 255.255.255.240
network 79.106.244.16 mask 255.255.255.248
neighbor 172.17.3.1 activate
neighbor 172.17.3.1 soft-reconfiguration inbound
neighbor 172.17.3.1 route-map ALB-IN in
neighbor 172.17.3.1 route-map ALB-OUT out
neighbor 172.17.5.1 activate
neighbor 172.17.5.1 soft-reconfiguration inbound
neighbor 172.17.5.1 route-map ALB-IN in
neighbor 172.17.5.1 route-map ALB-OUT out
exit-address-family
!
ip forward-protocol nd
ip ftp username nexus
ip ftp password 7 070172545B1A17560F0718
no ip http server
no ip http secure-server
ip tftp source-interface GigabitEthernet0
ip nat settings mode cgn
no ip nat settings support mapping outside
ip nat settings pap bpa step-size 8
ip nat settings nonpatdrop
ip nat translation timeout 300
ip nat translation tcp-timeout 2500
ip nat translation udp-timeout 300
ip nat translation finrst-timeout 45
ip nat translation syn-timeout 45
ip nat translation dns-timeout 45
ip nat translation icmp-timeout 45
ip nat pool NAT-POOL 79.106.226.1 79.106.226.30 netmask 255.255.255.224
ip nat inside source static tcp 192.168.66.10 23 79.106.226.22 233 extendable
ip nat inside source static udp 192.168.66.10 161 79.106.226.22 1161 extendable
ip nat inside source static tcp 192.168.90.100 1212 79.106.226.22 1212 extendable
ip nat inside source static tcp 192.168.34.99 8080 79.106.226.22 8080 extendable
ip nat inside source static tcp 192.168.90.100 25461 79.106.226.22 25461 extendable
ip nat inside source static tcp 192.168.90.150 80 79.106.226.42 80 extendable
ip nat inside source static tcp 192.168.34.100 22 79.106.226.42 225 extendable
ip nat inside source static tcp 192.168.80.100 22 79.106.226.42 2255 extendable
ip nat inside source static tcp 10.0.1.10 22 79.106.226.42 2276 extendable
ip nat inside source static tcp 192.168.80.100 3306 79.106.226.42 3306 extendable
ip nat inside source static tcp 192.168.80.100 7999 79.106.226.42 7999 extendable
ip nat inside source static tcp 192.168.33.205 8000 79.106.226.42 8000 extendable
ip nat inside source static tcp 192.168.34.100 80 79.106.226.42 8008 extendable
ip nat inside source static tcp 192.168.33.205 8080 79.106.226.42 8080 extendable
ip nat inside source static tcp 192.168.80.100 80 79.106.226.42 8877 extendable
ip nat inside source static tcp 10.50.80.4 3389 79.106.226.42 9697 extendable
ip nat inside source static tcp 10.0.1.10 80 79.106.226.43 8887 extendable
ip nat inside source list 1 pool NAT-POOL overload
ip route 10.10.0.0 255.255.240.0 192.168.17.2
ip route 10.10.88.0 255.255.255.0 10.109.109.1 name Cerrik
ip route 10.200.200.0 255.255.255.0 192.168.17.2
ip route 79.106.185.0 255.255.255.240 Null0
ip route 79.106.185.0 255.255.255.248 79.106.226.38
ip route 79.106.226.0 255.255.255.224 Null0
ip route 79.106.226.40 255.255.255.252 Null0
ip route 79.106.226.48 255.255.255.240 79.106.226.38
ip route 79.106.244.16 255.255.255.248 Null0
ip route 79.106.245.192 255.255.255.240 Null0
ip route 172.10.1.0 255.255.255.0 192.168.17.2
ip route 192.168.33.0 255.255.255.0 192.168.17.2
ip route 192.168.61.0 255.255.255.0 172.55.55.1
ip route 192.168.71.0 255.255.255.0 192.168.17.2

Can help me PLS!

[Enea Mertiri]

I tested something, caught a client who had this problem and MTu inside the ONU (Client Router) I put the MTU manual 1480 and everything worked ok. Can you help me how I can make a solution from ASR for this?
Thank you

[balaji.bandi · Accepted solution]

if you like to change in ASR - change below line :

interface Virtual-Template1
description PPPOE
mtu 1492
ip dhcp client lease 1 0 0
ip unnumbered Loopback0
no ip redirects
no ip proxy-arp
ip nat inside
no ip tcp adjust-mss 1452

ip tcp adjust-mss 1480
no logging event link-status
peer default ip address dhcp-pool PPPOE
ppp mtu adaptive
ppp authentication pap chap PPPOE
ppp authorization PPPOE
ppp accounting PPPOE
ppp ipcp dns 217.24.241.205 217.24.241.206

[Enea Mertiri]

Router(config-if)#ip tcp adjust-mss ?
<500-1460> Maximum segment size in bytes

[MHM Cisco World]

...

[Enea Mertiri]

ok thank you , i try this and send fedback

[Enea Mertiri]

My problem is such that, I have logged in 1660 pppoe and in one day the problem could happen to me in 10 different clients either more or less. With these clients, when the problem occurs, every page is pinged, but some pages are not opened, for example, Instagram is opened in the APP, but it is not opened on the web, and some other youtube pages are opened and it works very well. I tried to ping with mtu and the maximum I can ping each page is mtu 1464 more not ping.

[MHM Cisco World]

...

[MHM Cisco World]

...

[Enea Mertiri]

i try with dns google , cloudflare and is same problem 

[MHM Cisco World]

...

[Enea Mertiri]

 can see pls is correct ?

[MHM Cisco World]

...

[Enea Mertiri]

Yes this is templet for client pppoe

[Enea Mertiri]

You can check all configuration for my ASR 1001 and can help me for more info pls

Thank You for all