RE: ppp authentication w/ dialer profiles

From: Green, Stephen (Stephen.Green@xxxxxxxxxxxxx)
Date: Wed May 30 2001 - 17:46:45 GMT-3


   
Where are you using dialer profiles? I see an interface configured and a
rotary-group. No dialer profiles...

http://www.cisco.com/warp/public/793/access_dial/ddr_dialer_profile.html

http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/dial
ts_c/dtsprt5/dcdiprof.htm

read the sectin on "new dialer profile model"

Stephen

example of a profile
interface dialer0
 ip unnumbered loopback0
 encapsulation ppp
 dialer remote-name Remote0
 dialer pool 1
 dialer string 5551212
 dialer-group 1

interface dialer1
 ip unnumbered loopback0
 encapsulation ppp
 dialer remote-name Remote1
 dialer pool 2
 dialer string 5551234
 dialer-group 1

interface bri 0
 encapsulation PPP
 dialer pool-member 1
 dialer pool-member 2
 ppp authentication chap

-----Original Message-----
From: Martin, Chris [mailto:chris@pacinter.net]
Sent: Wednesday, May 30, 2001 4:26 PM
To: rsevier; Daniel C. Young; Groupstudy (E-mail)
Subject: Re: ppp authentication w/ dialer profiles

NO im suggesting that you can have PPP authentication on the BRI interface
and not have a dialer interface. Look at my configs below:

Router R1 has ppp authentication on BRI interface only, no dialer interface
is used:

Interface bri0/0
ip address x.x.x.x x.x.x.x.
encap ppp
isnd spid1 xxxx xxxxxxx
isdn spid2 xxxx xxxxxxx
dialer idle-timeout 90
dialer map ip 196/1/1/1/1 name routerA
dialer-group 1
ppp authenticaton chap
ppp multi

!
no ip classless
dialer-list 1 protocol ip permit
.
Router with dialer interface providing same function:

interface BRI0
 description ISDN configuration interface
 no ip address
 no ip directed-broadcast
 encapsulation ppp
 dialer rotary-group 0
 isdn switch-type basic-ni
 isdn twait-disable
 isdn spid1 xxxxxxxxxxxx
 isdn spid2 xxxxxxxxxxxx
!
interface Dialer0
 description Dialer interface for SPID #
 ip address x.x.x.x.x.x.x.x
 no ip directed-broadcast
 encapsulation ppp
 dialer in-band
 dialer idle-timeout 600
 dialer string xxxxxxxxxx
 dialer hold-queue 10
 dialer load-threshold 2 either
 dialer-group 1
 ppp authentication chap callin
 ppp chap hostname xxxxxxx
 ppp chap password xxxxxxx
 ppp pap sent-username xxxxxxx
 ppp multilink
!

So here we have 2 configs both providing the option to do authentication and
dial out

----- Original Message -----
From: "rsevier" <rsevier@zealousolutions.com>
To: "Martin, Chris" <chris@pacinter.net>; "Daniel C. Young"
<danyoung99@mediaone.net>; "Groupstudy (E-mail)" <ccielab@groupstudy.com>
Sent: Wednesday, May 30, 2001 1:21 PM
Subject: RE: ppp authentication w/ dialer profiles

> Chris - Are you suggesting that you can have ppp auth on the dialer
> interface and not on the physical interface and everything will work fine.
> We are finding that not to be the case. Could you expand on a situation
> where ppp auth is on the dialer interface only because I could see how
that
> would be more versatile.
>
> Raymond
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> Martin, Chris
> Sent: Wednesday, May 30, 2001 12:47 PM
> To: Daniel C. Young; Groupstudy (E-mail)
> Subject: Re: ppp authentication w/ dialer profiles
>
>
> You can have ppp authentication under the BRI interface or the dialer
> interface. It just depends on how customized you want your config. Many
> people think you need to have both and you dont. If you only have 2
routers
> talking isdn to each other then you can specify any ppp authentication
> cammands under the BRI interface.
>
> If you have multiple authentication types or isdn connections, then use
the
> dialer interfaces for different authentication types and callbacks...
>
>
> ----- Original Message -----
> From: "Daniel C. Young" <danyoung99@mediaone.net>
> To: "Groupstudy (E-mail)" <ccielab@groupstudy.com>
> Sent: Wednesday, May 30, 2001 12:22 PM
> Subject: ppp authentication w/ dialer profiles
>
>
> > Group,
> >
> > Just need a clarification: when configuring isdn with dialer profiles,
> where
> > do the ppp parameters need to go to (physical interface or dialer
> > interface)? --specifically, the 'ppp authentication' command.
> >
> > The reason we are asking is that we excluded 'ppp authentication' from
the
> > physical interface but applied it to the dialer interface, and 'debug
ppp
> > authentication' showed no output for authentication.
> >
> >
> >
> >
> > In case you want to include this information...This is with 'ppp auth'
on
> > the dialer interface (no authentication debug message). See bellow:
> >
> > 15:16:29: BR0 DDR: rotor dialout [priority]
> > 15:16:29: BR0 DDR: Dialing cause ip (s=172.16.120.1, d=172.16.120.2)
> > 15:16:29: BR0 DDR: Attempting to dial 384020
> > 15:16:29: ISDN BR0: TX -> SETUP pd = 8 callref = 0x16
> > 15:16:29: Bearer Capability i = 0x8890
> > 15:16:29: Channel ID i = 0x83
> > 15:16:29: Called Party Number i = 0x80, '384020'
> > 15:16:29: ISDN BR0: RX <- CALL_PROC pd = 8 callref = 0x96
> > 15:16:29: Channel ID i = 0x89
> > 15:16:29: Signal i = 0x05 - Confirm tone on
> > 15:16:29: ISDN BR0: RX <- ALERTING pd = 8 callref = 0x96
> > 15:16:29: Signal i = 0x01 - Ring back tone on
> > 15:16:29: ISDN BR0: RX <- CONNECT pd = 8 callref = 0x96
> > 15:16:29: Signal i = 0x3F - Tones off
> > 15:16:29: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up
> > 15:16:30: %DIALER-6-BIND: Interface BR0:1 bound to profile Di0
> > 15:16:30: BR0:1 PPP: Treating connection as a callout
> > 15:16:30: ISDN BR0: TX -> CONNECT_ACK pd = 8 callref = 0x16
> > 15:16:30: BR0:1 DDR: dialer protocol up
> > 15:16:31: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1,
changed
> > state to up
> > 15:16:36: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 384020
> > 384020
> >
> > r1#s deb
> > Dial on demand:
> > Dial on demand events debugging is on
> > PPP:
> > PPP authentication debugging is on
> > ISDN:
> > ISDN Q931 packets debugging is on
> >
> > Yet, the call was placed, and the line still went up. Once we placed it
on
> > the physical interface, the handshake occured properly as it should.
> > Puzzling...truly puzzling.
> >
> > Now, on Cisco's web site for PPP Callback Over ISDN:
> > http://www.cisco.com/warp/public/793/access_dial/isdn-ppp-callback.html
> >
> > You will notice that one router is configured with legacy ddr and the
> other
> > with dialer profiles. The router with the dialer profiles, maui-nas-04,
> has
> > the 'ppp authentication' command on its dialer interface -- not the
> physical
> > interface!
> >
> > Later, we tested various combinations of 'ppp authenticaion' on bri0 and
> > dialer0 and found the following:
> > br0 on r1, d0 on r2 --> OK
> > br0 on r1, br0 on r2 --> OK
> > d0 on r1, d0 on r2 --> Call connect, but no authenticaion (see above)
> > br0 & d0 on r1, br0 on r2 --> OK
> > br0 & d0 on r1, br0 & d0 on r2 --> NO GO!
> >
> > Our theory is that 'encapsulation ppp' needs to go on at least one
> physical,
> > but where are all othe ther ppp parameters supposed to go?
> >
> > Can anyone verify and explain this?
> >
> > Regards,
> > Daniel & Raymond
> > **Please read:http://www.groupstudy.com/list/posting.html
> **Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:30:57 GMT-3