3640 connecting via pppoe to swbell dsl

[jpedersen]

Has anyone connected to swbell dsl w/ a 2xxx or 36xx router? I have internal Net on e0/0 and external to dsl modem on e2/0. Below is my sanitized config.

-- Snip --
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname K2
!
boot system flash
logging buffered 4096 debugging
enable secret 5 ******************
!
username ****** password 0 ******
ip subnet-zero
!
!
no ip domain-lookup
ip domain-name none.net
!
ip audit notify log
ip audit po max-events 100
ip ssh source-interface Ethernet2/0
vpdn enable
!
vpdn-group 1
request-dialin
protocol pppoe
!
!
!
!
!
!
!
!
!
fax interface-type fax-mail
mta receive maximum-recipients 0
partition slot1: 2 8 8
!
!
!
!
!
interface Ethernet0/0
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip tcp adjust-mss 1452
half-duplex
!
interface Serial0/0
no ip address
shutdown
!
interface BRI0/0
no ip address
shutdown
!
interface TokenRing0/0
no ip address
shutdown
ring-speed 16
!
interface Serial1/0
no ip address
shutdown
!
interface Serial1/1
no ip address
shutdown
!
interface Serial1/2
no ip address
shutdown
!
interface Serial1/3
no ip address
shutdown
!
interface BRI2/0
no ip address
shutdown
!
interface Ethernet2/0
no ip address
half-duplex
pppoe enable
pppoe-client dial-pool-number 2
pppoe-client dial-pool-number 1
!
interface Serial2/0
no ip address
shutdown
!
interface Ethernet2/1
no ip address
half-duplex
pppoe enable
!
interface Dialer1
ip address negotiated
ip mtu 1492
ip nat outside
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication chap
ppp chap hostname *****************
ppp chap password 0 **************
!
router ospf 1
log-adjacency-changes
network 192.168.1.0 0.0.0.255 area 0
!
ip nat inside source list 101 interface Dialer1 overload
no ip classless
mp ip http server
ip pim bidir-enable
!
!
!
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps casa
snmp-server enable traps isdn call-information
snmp-server enable traps isdn layer2
snmp-server enable traps isdn isdnu-interface
snmp-server enable traps hsrp
snmp-server enable traps config
snmp-server enable traps entity
snmp-server enable traps envmon
snmp-server enable traps bgp
snmp-server enable traps rsvp
snmp-server enable traps frame-relay
snmp-server enable traps rtr
snmp-server enable traps syslog
snmp-server enable traps dlsw
snmp-server enable traps dial
snmp-server enable traps voice poor-qov
call rsvp-sync
!
!
mgcp profile default
!
dial-peer cor custom
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password ******
login local
rotary 1
length 49
width 132
transport input ssh
!
!
end
-- Snip --


The error I'm getting from debug is:

00:38:20: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up
00:38:20: Vi1 PPP: Treating connection as a callout
00:38:20: Vi1 PPP: Authorization NOT required
00:38:20: %DIALER-6-UNBIND: Interface Vi1 unbound from profile Di1
00:38:20: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to down

Any Ideas on what I'm missing. The DSL connection works fine plugged into my laptop.
(I also realize I missing a ton of security in this config but my aim is to get it working first.)

Thanks,

James Pedersen
pedersen@pobox.com

 

[jpedersen]

Problem Solved. Below is the sanitized working config:

Current configuration : 2483 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname ******
!
boot system flash
logging buffered 4096 debugging
enable secret 5 ****************
!
username ********* password 0 **********
ip subnet-zero
!
!
ip domain-name none.net
ip name-server **************
ip name-server **************
!
ip audit notify log
ip audit po max-events 100
ip ssh source-interface Ethernet2/0
vpdn enable
!
vpdn-group 1
request-dialin
protocol pppoe
!
!
!
!
!
!
!
!
!
fax interface-type fax-mail
mta receive maximum-recipients 0
partition slot1: 2 8 8
!
!
!
!
!
interface Ethernet0/0
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip tcp adjust-mss 1452
half-duplex
interface Ethernet2/0
no ip address
half-duplex
pppoe enable
pppoe-client dial-pool-number 1
no cdp enable
!
interface Ethernet2/1
no ip address
half-duplex
pppoe enable
!
interface Dialer1
ip address negotiated
ip mtu 1492
ip nat outside
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication pap callin
ppp pap sent-username ************ password 0 **********
!
router ospf 1
log-adjacency-changes
network 192.168.1.0 0.0.0.255 area 0
!
ip nat inside source list 101 interface Dialer1 overload
no ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
ip http server
ip pim bidir-enable
!
!
access-list 101 permit ip 192.0.0.0 0.255.255.255 any
!
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps casa
snmp-server enable traps isdn call-information
snmp-server enable traps isdn layer2
snmp-server enable traps isdn isdnu-interface
snmp-server enable traps hsrp
snmp-server enable traps config
snmp-server enable traps entity
snmp-server enable traps envmon
snmp-server enable traps bgp
snmp-server enable traps rsvp
snmp-server enable traps frame-relay
snmp-server enable traps rtr
snmp-server enable traps syslog
snmp-server enable traps dlsw
snmp-server enable traps dial
snmp-server enable traps voice poor-qov
call rsvp-sync
!
!
mgcp profile default
!
dial-peer cor custom
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password *****
login local
rotary 1
length 49
width 132
transport input ssh
!
!
end

 

[DTMan]

Does this work for a 2621 router as well? I'm trying to get my ppoe connection working on my dsl modem and haven't been able to figure it out. I notice a few lines you added there in the config is addressing ppp authentication chap. When I try to find these commands in the IOS (12.2 w/firewall), I can't seem to find them. What am I doing wrong?
Any suggestions would be greatly appreciated!
DTMan

 

[jpedersen]

The "ppp authentication" commands should be in your dialer1 interface. Also if you connecting to SWBell make sure you use PAP instead of CHAP. If you have the pppoe commands, that's the key portion.

The feature set I'm running is IP/FW/IDS Plus IPSEC 3DES

Here is the relevant sh ver info:

IOS (tm) 3600 Software (C3640-IK9O3S-M), Version 12.2(8)T4, RELEASE SOFTWARE (fc1)
System image file is "flash:c3640-ik9o3s-mz.122-8.T4.bin"

Hope this helps.

JPedersen

 

[DTMan]

So, if I'm understanding you correctly. I would need to enter the following commands.
config t
int fa 0/0
dialer1

Is this a virtual interface? (I'm not sure if I'm using the correct terminology here) I still kind of new to the Cisco command line stuff. Is there a way to check on Cisco's web site, other than the TAC (because I don't have access to it), to check this IOS command set?

Thanks,
TR

 

[DTMan]

James,

I'm confused on the vpdn command. Also, can you review the config below. Ethernet 0/0 is the connection going to the DSL modem.
On your config, I notice the commands under int 2/0 of pppoe enable, pppoe-client dial-pool-number 1. For some reason I can't find this commands or get them to work. As said above, I can't find the vpdn or vpdn-group command.

BTW, I'm running a 2621 Cisco router IOS 12.2 (w/FW).

Also, to get this to work, do you need to issue the reload command or just plug in?

Suggestions?
Thanks in advance!
DTMan

Current configuration : 1785 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname *********
!
logging buffered 4096 debugging
enable secret 5 ********
!
ip subnet-zero
!
!
ip domain-name home.com
ip name-server xxx.xxx.xxx.xx (internal DNS)
ip name-server xxx.xxx.xxx.xx (external DNS - ISP)
ip name-server xxx.xxx.xx.xx (external DNS - ISP)
!
ip audit notify log
ip audit po max-events 100
!
!
interface FastEthernet0/0
description connected to Internet
no ip address
ip nat outside
duplex auto
speed auto
!
interface FastEthernet0/1
description connected to EthernetLAN
ip address 192.168.16.1 255.255.255.0
ip nat inside
duplex auto
speed auto
!
interface Dialer1
ip address negotiated
ip mtu 1492
ip nat outside
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication pap callin
ppp pap sent-username ******** password 7 ********
!
router rip
version 2
passive-interface FastEthernet0/0
network 192.168.16.0
no auto-summary
!
ip nat pool (routername)-natpool-1 192.168.16.10 192.168.16.50 netmask 255.255.255.0
ip nat inside source list 1 pool (routername)-natpool-1 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
ip http server
ip pim bidir-enable
!
access-list 1 permit 192.168.16.0 0.0.0.255
!
banner motd ^CUnauthorized access is strictly prohibited by law. Violaters will be prosecuted according to local, state, and federal laws!^C
!
line con 0
exec-timeout 0 0
password 7 03095411071D351C1B5B4C
login
line aux 0
line vty 0 4
password 7 104306030405065B59567F
login
!
no scheduler allocate
end

 

[jpedersen]

DTMan,

It appears that your IOS version doesn't support pppoe.
These IOS Images I think are the minimum for the 2600 series to do firewall and pppoe.

IOS Ver Image File DRAM/Flash
12.2(4)T3 c2600-do3s-mz.12.2-4.T3 (64/16)

12.2(4)T1 c2600-do3s-mz.12.2-4.T1 (64/16)

12.2(4)T c2600-do3s-mz.12.2-4.T (64/16)

12.2(2)T4 c2600-do3s-mz.12.2-2.T4 (64/16)

12.2(2)T1 c2600-do3s-mz.12.2-2.T1 (64/16)

12.2(2)T c2600-do3s-mz.12.2-2.T (64/16)

If you aren't running one of these post the image file name you are running and I'll look it up on CCO. Also let me know your Dram & Flash sizes.

This is the annotated command set:

conf t

vpdn enable
#Configure the virtual private dial-up network.

vpdn-group 1
#Configure the VPDN group.

request-dialin
#Specify the dialing mode.

protocol pppoe
#Specify the PPPoE protocol for the VPDN group

exit

int fe0/1
#Configure the Ethernet 1 interface for PPPoe support.

ip tcp adjust-mss 1452
#Specify the maximum segment size for TCP SYN packets.
#This is because of the added overhead of the pppoe headers

exit

int fe0/0

pppoe enable
#Enable the PPPoE protocol for the Ethernet 1 interface.

pppoe-client dial-pool-number 1
#Configure a PPPoE client dial pool.

no cdp enable
#You don't neeed to send cdp packets to SWBell.

exit

interface dialer 1
#Configure the Dialer interface.

ip address negotiated
#Get IP via DHCP

ip mtu 1492
#Set the size of the maximum IP transmission unit (MTU).

encapsulation ppp
#Specify the encapsulation type.

dialer pool 1
#Associate the dialer pool configured for the Ethernet 1
#interface with the Dialer interface.

dialer-group 1
#Assign the Dialer interface to a dialer list.

ppp authentication pap callin
#Set the PPP authentication method to PAP, and indicate
#that the remote system is to be authenticated on incoming
#calls only.

ppp pap sent-username username password password #Supply the PAP username and password.

end

wr mem
#Save your config

reload
#reboot


Hope this helps. If you need the IOS image email me. pedersen@pobox.com.

James










James