From: Mike Williams (ccie2be@swbell.net)
Date: Thu Dec 18 2003 - 02:31:07 GMT-3
Well, funny you ask. We were 12.2.x (don't remember exact version) but
moved to 12.3(3) because we had to use a AAA statement "if-needed" that
apparently (according to TAC) didn't work properly until 12.3(3). We
are using this dial-up box for a specific set of users that have
problems using their RSA tokens properly (which we use RADIUS to access
an ACE system for the tokens when they dial in). In order to allow them
to walk through the prompts to fix their own token problems, etc, we
setup this dial-up box specifically so that when they dial-up, they
choose (under Windows dial-up Properties) to use the post-dial terminal
window, they can enter their username, then password (which is a PIN
plus their RSA token code at the moment), which (using RADIUS
attributes) logs them in as PRIV_LEVEL 0 which only gives them access to
the "ppp" command (and a couple of others like "exit", but not even show
commands as I've removed show commands from level 0). Once they type
"ppp" (or "ppp default") and click DONE, Windows establishes the PPP
connection with the router. The problem we get under 12.3(3) is that
many times after the modem is done handshaking, users get a blank
post-dial terminal window (instead of one that has a "USERNAME" prompt.
It turns out, they *can* indeed type (blindly) a username, hit enter,
then their password, hit enter, then type "ppp" and hit enter and click
DONE and BAM! they get their PPP connection. However, being users, this
is very troublesome to them to get this "blank" screen and have to type
blindly. So I'm attempting to upgrade the code to see if that fixes the
problem. I tried (in order) 12.3(5a), 12.3(5), and 12.3(3c) all of
which had this same PPP termination problem (as seen in the debug I
originally posted). There are only two other IOS versions for the 3725
(12.3(3a) and 12.3(3b)) above 12.3(3) that I didn't try (i.e. there are
5 newer IOS versions past 12.3(3), and I tried the 3 newest ones). I
was at a spot where users hadn't been able to dial-in for a couple of
hours and I needed to get back up, so I reverted to 12.3(3) with blank
screen and all to at least get them back up. I might try (3a) and (3b)
tomorrow. But this is really frustrating that the 3 newest versions of
IOS can't even get through a simple PPP dial-up negociation without
problems. And I *know* it's not a client issue (the PPP failure) as
they dial-up fine under 12.3(3).
<rant>
Sadly this isn't the only dial-up issue we have. We have another box
(3640 w/48 MICA modems) used for dial-up that we also use the Dial-out
IP (I think it's called, the software that makes a virtual COM
port/modem on your PC and then connects to the router like a
reverse-telnet) and we can't make it fax out for anything.
Flabbergasted, we downgraded code to 12.1.x and it works (but causes
other issues with people dialing IN), but it will NOT work under 12.2 at
all and TAC has been "working on this" for almost a MONTH with no
answers or even helpful suggestions (at first the TAC engineer spent
days trying to convince us that it was FAX MACHINES with the problems
(not just one fax machine but EVERY fax machine in the world!!!). IMO,
I'm starting to wish I just had a freaking stack of USR 56K modems for
people to dial into. I'm getting to the point where I just don't like
changing IOS (on ANY hardware from 2600s through 4000/4500s and 6500s)
if it's at all possible, just to fix a simple issue because I'm slowly
learning that 9 out of 10 times when you upgrade to fix one problem, you
are more likely to inherit 5 problems for every one you fix! This does
NOT bode well for Cisco IMO! Years ago, when I moved into Cisco
networking from server admin (MS/Novell), I used to think (naively?)
that Cisco's IOSes were more solid, better written and maintained than
MS Windows could ever be, but now I'm starting to think otherwise. (Are
you hearing any of this Cisco?!?!?! I said I'm starting to think that
Cisco IOSes are are big of a piece of crap as MS WINDOWS!!! The red
lights and warning sirens should be going off at 170 Tasman Drive when
dedicated Cisco nuts like me start comparing IOS to WINDOWS and meaning
it!!!)
</rant>
Mike W.
-----Original Message-----
From: Netwrkx [mailto:netwrkx@myeastern.com]
Sent: Wednesday, December 17, 2003 10:32 PM
To: Mike Williams
Cc: ccielab@groupstudy.com
Subject: Re: PPP is broken!!! Help!!
I've had issues many times with our 3640's and the mica's when
upgrading.
Have you tried going back to 12.3?
-TV
----- Original Message -----
From: "Mike Williams" <ccie2be@swbell.net>
To: "CCIELab@Groupstudy.com" <ccielab@groupstudy.com>
Sent: Wednesday, December 17, 2003 2:49 PM
Subject: PPP is broken!!! Help!!
> Hello all,
>
> I have a 3725 with 24 MICA modems used for people to dial-in to. Long
> story short, I upgraded from 12.3 to 12.3(5a), now when anyone tries
> to dial in I get this from a "debug ppp neg" (see below). The part
> that concerns me is the section just under the line of asterisks. As
> soon as LCP is finished negociating, something happens the there's
> something that terminates the PPP link. It even appears the higher
> control protocols don't know this is happening as both CCP and IPCP
> try to send a packet to negociate and drop them because LCP is
> down..... ANY IDEAS why this is happening?!?!?
>
> DIAL-UP#
> Dec 17 13:37:18 CST: %ISDN-6-CONNECT: Interface Serial1/0:22 is now
> connected to 3143642000 DIAL-UP#
> Dec 17 13:37:50 CST: %LINK-3-UPDOWN: Interface Async79, changed state
to
> up
> DIAL-UP#
> Dec 17 13:37:50 CST: As79 EVT: Cstate 4 0x00000000
> Dec 17 13:37:50 CST: As79 PPP: Using dialer call direction
> Dec 17 13:37:50 CST: As79 PPP: Treating connection as a callin
> Dec 17 13:37:50 CST: As79 PPP: Phase is ESTABLISHING, Passive Open
> Dec 17 13:37:50 CST: As79 LCP: State is Listen
> DIAL-UP#
> Dec 17 13:37:52 CST: As79 LCP: TIMEout: State Listen
> Dec 17 13:37:52 CST: As79 PPP: No remote authentication for call-in
> Dec 17 13:37:52 CST: As79 LCP: O CONFREQ [Listen] id 1 len 33
> Dec 17 13:37:52 CST: As79 LCP: ACCM 0x000A0000 (0x0206000A0000)
> Dec 17 13:37:52 CST: As79 LCP: MagicNumber 0x0DB2D884
> (0x05060DB2D884)
> Dec 17 13:37:52 CST: As79 LCP: PFC (0x0702)
> Dec 17 13:37:52 CST: As79 LCP: ACFC (0x0802)
> Dec 17 13:37:52 CST: As79 LCP: MRRU 1524 (0x110405F4)
> Dec 17 13:37:52 CST: As79 LCP: EndpointDisc 1 DIAL-UP
> (0x130901534552415048)
> DIAL-UP#
> Dec 17 13:37:54 CST: As79 LCP: TIMEout: State REQsent
> Dec 17 13:37:54 CST: As79 LCP: O CONFREQ [REQsent] id 2 len 33
> Dec 17 13:37:54 CST: As79 LCP: ACCM 0x000A0000 (0x0206000A0000)
> Dec 17 13:37:54 CST: As79 LCP: MagicNumber 0x0DB2D884
> (0x05060DB2D884)
> Dec 17 13:37:54 CST: As79 LCP: PFC (0x0702)
> Dec 17 13:37:54 CST: As79 LCP: ACFC (0x0802)
> Dec 17 13:37:54 CST: As79 LCP: MRRU 1524 (0x110405F4)
> Dec 17 13:37:54 CST: As79 LCP: EndpointDisc 1 DIAL-UP
> (0x130901534552415048)
> Dec 17 13:37:54 CST: As79 EVT: Packet 0 0x636D880C
> Dec 17 13:37:54 CST: As79 LCP: I CONFREQ [REQsent] id 0 len 23
> Dec 17 13:37:54 CST: As79 LCP: ACCM 0x00000000 (0x020600000000)
> Dec 17 13:37:54 CST: As79 LCP: MagicNumber 0x1F0C6EA2
> (0x05061F0C6EA2)
> Dec 17 13:37:54 CST: As79 LCP: PFC (0x0702)
> Dec 17 13:37:54 CST: As79 LCP: ACFC (0x0802)
> Dec 17 13:37:54 CST: As79 LCP: Callback 6 (0x0D0306)
> Dec 17 13:37:54 CST: As79 LCP: O CONFREJ [REQsent] id 0 len 7
> Dec 17 13:37:54 CST: As79 LCP: Callback 6 (0x0D0306)
> Dec 17 13:37:55 CST: As79 EVT: Packet 0 0x63BA4040
> Dec 17 13:37:55 CST: As79 LCP: I CONFREQ [REQsent] id 1 len 20
> Dec 17 13:37:55 CST: As79 LCP: ACCM 0x00000000 (0x020600000000)
> Dec 17 13:37:55 CST: As79 LCP: MagicNumber 0x1F0C6EA2
> (0x05061F0C6EA2)
> Dec 17 13:37:55 CST: As79 LCP: PFC (0x0702)
> DIAL-UP#
> Dec 17 13:37:55 CST: As79 LCP: ACFC (0x0802)
> Dec 17 13:37:55 CST: As79 LCP: O CONFACK [REQsent] id 1 len 20
> Dec 17 13:37:55 CST: As79 LCP: ACCM 0x00000000 (0x020600000000)
> Dec 17 13:37:55 CST: As79 LCP: MagicNumber 0x1F0C6EA2
> (0x05061F0C6EA2)
> Dec 17 13:37:55 CST: As79 LCP: PFC (0x0702)
> Dec 17 13:37:55 CST: As79 LCP: ACFC (0x0802)
> DIAL-UP#
> Dec 17 13:37:56 CST: As79 LCP: TIMEout: State ACKsent
> Dec 17 13:37:56 CST: As79 LCP: O CONFREQ [ACKsent] id 3 len 33
> Dec 17 13:37:56 CST: As79 LCP: ACCM 0x000A0000 (0x0206000A0000)
> Dec 17 13:37:56 CST: As79 LCP: MagicNumber 0x0DB2D884
> (0x05060DB2D884)
> Dec 17 13:37:56 CST: As79 LCP: PFC (0x0702)
> Dec 17 13:37:56 CST: As79 LCP: ACFC (0x0802)
> Dec 17 13:37:56 CST: As79 LCP: MRRU 1524 (0x110405F4)
> Dec 17 13:37:56 CST: As79 LCP: EndpointDisc 1 DIAL-UP
> (0x130901534552415048)
> Dec 17 13:37:56 CST: As79 EVT: Packet 0 0x63BA3D44
> Dec 17 13:37:56 CST: As79 LCP: I CONFREJ [ACKsent] id 3 len 17
> Dec 17 13:37:56 CST: As79 LCP: MRRU 1524 (0x110405F4)
> Dec 17 13:37:56 CST: As79 LCP: EndpointDisc 1 DIAL-UP
> (0x130901534552415048)
> Dec 17 13:37:56 CST: As79 LCP: O CONFREQ [ACKsent] id 4 len 20
> Dec 17 13:37:56 CST: As79 LCP: ACCM 0x000A0000 (0x0206000A0000)
> Dec 17 13:37:56 CST: As79 LCP: MagicNumber 0x0DB2D884
> (0x05060DB2D884)
> Dec 17 13:37:56 CST: As79 LCP: PFC (0x0702)
> Dec 17 13:37:56 CST: As79 LCP: ACFC (0x0802)
> Dec 17 13:37:56 CST: As79 EVT: Packet 0 0x63BA3A48
> Dec 17 13:37:56 CST: As79 LCP: I CONFACK [ACKsent] id 4 len 20
> Dec 17 13:37:56 CST: As79 LCP: ACCM 0x000A0000 (0x0206000A0000)
> Dec 17 13:37:56 CST: As79 LCP: MagicNumber 0x0DB2D884
> (0x05060DB2D884)
> Dec 17 13:37:56 CST: As79 LCP: PFC (0x0702)
> Dec 17 13:37:56 CST: As79 LCP: ACFC (0x0802)
> Dec 17 13:37:56 CST: As79 LCP: State is Open
> Dec 17 13:37:56 CST: As79 PPP: Phase is FORWARDING, Attempting Forward
> Dec 17 13:37:56 CST: As79 EVT: Hook 1 0x00000000
> Dec 17 13:37:56 CST: As79 EVT: Forwarded 0 0x00000000
> Dec 17 13:37:56 CST: As79 PPP: Phase is ESTABLISHING, Finish LCP
>
************************************************************************
> **********************************
> Dec 17 13:37:56 CST: As79 PPP: Sending Acct Event[Down] id[15]
> Dec 17 13:37:56 CST: As79 PPP: Phase is TERMINATING
> Dec 17 13:37:56 CST: As79 LCP: O TERMREQ [Open] id 5 len 4
> Dec 17 13:37:56 CST: As79 EVT: Packet 0 0x63BA4040
> Dec 17 13:37:56 CST: As79 LCP: I IDENTIFY [TERMsent] id 2 len 18 magic
> 0x1F0C6EA2 MSRASV5.10
> DIAL-UP#
> Dec 17 13:37:56 CST: As79 EVT: Packet 0 0x63BA3D44
> Dec 17 13:37:56 CST: As79 LCP: I IDENTIFY [TERMsent] id 3 len 25 magic
> 0x1F0C6EA2 MSRAS-1-PKILAPTOP
> Dec 17 13:37:56 CST: As79 EVT: Packet 0 0x63BA3A48
> Dec 17 13:37:56 CST: As79 CCP: LCP not open, discarding packet
> Dec 17 13:37:56 CST: As79 EVT: IPCP Packet 0 0x63BA4040
> Dec 17 13:37:56 CST: As79 IPCP: LCP not open, discarding packet
> DIAL-UP#
> Dec 17 13:37:58 CST: As79 LCP: TIMEout: State TERMsent
> Dec 17 13:37:58 CST: As79 LCP: O TERMREQ [TERMsent] id 6 len 4
> DIAL-UP#
> Dec 17 13:38:00 CST: As79 LCP: TIMEout: State TERMsent
> Dec 17 13:38:00 CST: As79 LCP: State is Closed
> Dec 17 13:38:00 CST: As79 PPP: Phase is DOWN
> Dec 17 13:38:00 CST: As79 PPP: Phase is ESTABLISHING, Passive Open
> Dec 17 13:38:00 CST: As79 LCP: State is Listen
> DIAL-UP#
> Dec 17 13:38:00 CST: %ISDN-6-DISCONNECT: Interface Serial1/0:22
> disconnected from 3143642000 , call
> lasted 48 seconds
> DIAL-UP#
> Dec 17 13:38:02 CST: %LINK-5-CHANGED: Interface Async79, changed state
> to reset
> DIAL-UP#
> Dec 17 13:38:02 CST: As79 EVT: Cstate 5 0x00000000
> Dec 17 13:38:02 CST: As79 LCP: State is Closed
> Dec 17 13:38:02 CST: As79 PPP: Phase is DOWN
> DIAL-UP#
> Dec 17 13:38:07 CST: %LINK-3-UPDOWN: Interface Async79, changed state
to
> down
> DIAL-UP#
> Dec 17 13:38:07 CST: As79 EVT: Cstate 0 0x00000000
> DIAL-UP#
>
> ______________________________________________________________________
> _
> Please help support GroupStudy by purchasing your study materials
from:
> http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Sat Jan 03 2004 - 08:25:42 GMT-3