From: Larry Roberts (larryr@netbeam.net)
Date: Sun Sep 21 2003 - 05:32:43 GMT-3
So you are saying pinging doesn't work at all until you add authentication?
I misunderstood your statement as trying to ping your own interface or the
directly connected neighbor specifically, which requires the /32 route or a
dialer-map pointing to your own interface. So what does the working config
look like? I see a couple of issues here that would prevent it from working.
-Larry
----- Original Message -----
From: "Volodymyr Levytskyy" <volodymyr.levytskyy@3web.net>
To: "Larry Roberts" <larryr@netbeam.net>
Cc: <ccielab@groupstudy.com>
Sent: Sunday, September 21, 2003 2:23 AM
Subject: Re: isdn and authentication
> Hmmm, look at this then:
> access(BRI0/0)<--->(BRI0/0)core
> *******************8
> ACCESS
> !
> interface BRI0/0
> ip address 1.1.1.1 255.255.255.252
> encapsulation ppp
> dialer string 111
> dialer-group 1
> isdn switch-type basic-net3
> !
> dialer-list 1 protocol ip permit
> !
> ****************
> CORE
> !
> interface BRI0/0
> ip address 1.1.1.2 255.255.255.252
> encapsulation ppp
> isdn switch-type basic-net3
> ****************
> ACCESS
>
> 1.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
> C 1.1.1.0/30 is directly connected, BRI0/0
> C 1.1.1.2/32 is directly connected, BRI0/0
> access#
> ***************
> CORE
>
> 1.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
> C 1.1.1.1/32 is directly connected, BRI0/0
> C 1.1.1.0/30 is directly connected, BRI0/0
> core#
> ****************
> With config like this is, ping no working, only after I add "username
...."
> and "ppp auth chap" on both routers.
>
>
> ----- Original Message -----
> From: "Larry Roberts" <larryr@netbeam.net>
> To: "Volodymyr Levytskyy" <volodymyr.levytskyy@3web.net>;
> <ccielab@groupstudy.com>
> Sent: Sunday, September 21, 2003 12:51 AM
> Subject: Re: isdn and authentication
>
>
> > More than likely it is whenever you enable PPP you can ping the
neighbor,
> > not authentication. When you enable PPP encapsulation the router
installs
> a
> > /32 host route for the neighbor on the other side of the BRI link. It is
> the
> > /32 route that enables you to ping the directly connected neighbor and
> > yourself.
> >
> > HTH,
> > Larry Roberts
> > CCIE #7886 (R&S / Security)
> >
> >
> > ----- Original Message -----
> > From: "Volodymyr Levytskyy" <volodymyr.levytskyy@3web.net>
> > To: <ccielab@groupstudy.com>
> > Sent: Sunday, September 21, 2003 1:10 AM
> > Subject: isdn and authentication
> >
> >
> > > I am wondering why if is connected BRI to BRI without authentication
> there
> > is
> > > no ping on own interface or neighbor's, only when I enable
> authentication
> > I
> > > can ping these interfaces. Encapsulation ppp.
> > >
> > > Thanks
> > > Volodymyr
> > >
> > > ***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
> > >
This archive was generated by hypermail 2.1.4 : Wed Oct 01 2003 - 07:24:33 GMT-3