877 LAN issue 7

[silverhairbp]

Just got a 877 off of eBay (which might be part of the problem).

Most of the items were in sealed bags and looked new. Even the faceplate had the plastic film.

I followed the documentation to the letter, cabled the connections to the correct prots and double checked. Powered up the router. Got an OK light and eventually got a Carrier Detect light. I removed the PC ethernet cable from an operational switch and plugged it into FE0. PC indicated that the cable was unplugged and the ethernet light for LAN 0 did not come on. I tried with the other ports with similar results, the PC continued to indicate the cable was unplugged. I changed cables and tried the procedure again. Nothing, even after power cycle. I powered down the router disconnected all the connections, held in the reset button and powered-up the router. I held in the reset button for about 10 seconds while the router was under power. I waited about two minutes then powered down the router and plugged in the connections. Router came up, got OK and carrier detect, but not did not connect through the LAN.

I don't have a PC with a serial port or I would have connected to the console port to get more information.

Did I miss something? Is there something I can do to get the LAN side working so I can complete the set-up?

Or does this particular unit have a dead switch?

 

[silverhairbp]

I'm currently using the 831 router / Motorola modem set-up until the 877 is working. So its not really a matter of firing up the 831, its already there. I connect the 877 to the DSL line when I test the config. If it doesn't work I'll try a few things but eventually go back to the 831 router / Motorola modem so that we have connectivity. (Have to cold start the Motorola modem and the 831 every time.)

My last post was information from our existing Motorola modem, not from the 877. The 831 / Motorola modem setup is online now so that our network is online and we can get through to the internet.

Was talking to a friend of mine when you posted your last message. He reminded me that SBC uses the MAC address of the modem in their authentication process.

The Motorola modem MAC address is: 00:1d:6b:9b:e3:f0. I don't seem to be able to find the modem MAC address of the 877.

I'll call SBC to see if the MAC address is required for login/authentication. (if I can get through.) In the meantime, is there a command for MAC address emulation that would could try? Some way to configure the 877 modem so that it uses the same MAC address as the Motorola modem?


Per your request...

** From 877: **

Router#sh int di0
Dialer0 is up (spoofing), line protocol is up (spoofing)
Hardware is Unknown
Internet address will be negotiated using IPCP
MTU 1500 bytes, BW 56 Kbit, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation PPP, loopback not set
Keepalive set (10 sec)
DTR is pulsed for 1 seconds on reset
Last input never, output never, output hang never
Last clearing of "show interface" counters 00:00:21
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: weighted fair
Output queue: 0/1000/64/0 (size/max total/threshold/drops)
Conversations 0/0/16 (active/max active/max total)
Reserved Conversations 0/0 (allocated/max allocated)
Available Bandwidth 42 kilobits/sec
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes
0 packets output, 0 bytes



** From 831: **

Router#sh run
Building configuration...

Current configuration : 2706 bytes
!
version 12.3
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no logging buffered
!
no aaa new-model
ip subnet-zero
ip name-server 192.168.1.254
ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 10.10.10.1 10.10.10.99
ip dhcp excluded-address 10.10.10.155 10.10.10.254
!
ip dhcp pool CLIENT
import all
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
lease 0 2
!
!
ip inspect name myfw cuseeme timeout 3600
ip inspect name myfw ftp timeout 3600
ip inspect name myfw rcmd timeout 3600
ip inspect name myfw realaudio timeout 3600
ip inspect name myfw smtp timeout 3600
ip inspect name myfw tftp timeout 30
ip inspect name myfw udp timeout 15
ip inspect name myfw tcp timeout 3600
ip inspect name myfw h323 timeout 3600
ip audit po max-events 100
no ftp-server write-enable
!
!
partition flash 2 10 2
!
!
!
no crypto isakmp enable
!
!
!
interface Ethernet0
ip address 10.10.10.1 255.255.255.0
ip nat inside
no cdp enable
hold-queue 32 in
!
interface Ethernet1
ip address dhcp client-id Ethernet1
ip access-group 111 in
ip nat outside
ip inspect myfw out
duplex auto
no cdp enable
!
ip classless
ip http server
no ip http secure-server
ip nat inside source list 102 interface Ethernet1 overload
!
!
access-list 23 permit 10.10.10.0 0.0.0.255
access-list 102 permit ip 10.10.10.0 0.0.0.255 any
access-list 111 permit icmp any any administratively-prohibited
access-list 111 permit icmp any any echo
access-list 111 permit icmp any any echo-reply
access-list 111 permit icmp any any packet-too-big
access-list 111 permit icmp any any time-exceeded
access-list 111 permit icmp any any traceroute
access-list 111 permit icmp any any unreachable
access-list 111 permit udp any eq bootps any eq bootpc
access-list 111 permit udp any eq bootps any eq bootps
access-list 111 permit udp any eq domain any
access-list 111 permit esp any any
access-list 111 permit udp any any eq isakmp
access-list 111 permit udp any any eq 10000
access-list 111 permit tcp any any eq 1723
access-list 111 permit tcp any any eq 139
access-list 111 permit udp any any eq netbios-ns
access-list 111 permit udp any any eq netbios-dgm
access-list 111 permit gre any any
access-list 111 deny ip any any
no cdp run
!
control-plane
!
!
line con 0
exec-timeout 120 0
no modem enable
transport preferred all
transport output all
stopbits 1
line aux 0
transport preferred all
transport output all
line vty 0 4
access-class 23 in
exec-timeout 120 0
login local
length 0
transport preferred all
transport input all
transport output all
!
scheduler max-task-time 5000
!
end

 

[burtsbees]

Does the 877 have an interface for adsl, I.E. RJ11??? I did not know that there was a modem in the mix! Put the modem in bridge mode!

Burt

 

[silverhairbp]

I'm not connecting the 877 through the motorola modem. I pull the DSL line from the modem and connect it into the DSL port on the 877. The 877 has a built-in ADSL modem that I'm trying to use.

 

[silverhairbp]

Just spoke with AT&T. That was a complete waste. Their tech said that wouldn't even talk to me unless I was using or trying to set-up equipment that they supplied.

 

[burtsbees]

router(config)#int atm0
router(config-if)#mac-address 00:1d:6b:9b:e3:f0

That will configure the atm0 to spoof the MAC from the modem. That could be it---ppp is not successfully authenticating, I know that...

Burt

 

[silverhairbp]

I'll give that a try. Will report back later, maybe Sunday evening.

 

[silverhairbp]

I tried that command several times with different variations. I kept getting errors. First error was pointing the the first occurrence of ":" so I tried without the ":". Second error occurred at the "9" in the address.

Maybe MAC spoofing is not supported in the 877 or IOS 12.4(6)T6.

 

[burtsbees]

Sorry---the default form would be

router(config-if)#mac-address 001d.6b9b.e3f0

If you do any command, space, ?, then you can see the options. Do this for

router(config-if)#mac-address ?

And you will see the proper format...

Burt

 

[silverhairbp]

Would not take MAC address. Even tried mac-address ? and used the format it provided (HH:HH:HH mac-address) with no success. (I didn't fat-finger it, did check it closely and checked the loginID and password again).

I'm considering reducing the pain by getting a 2651 and configuring it to operate in a similar manner as our existing 831 (simple ethernet-to-ethernet that I understand). Would be simpler to configure and would provide the bandwidth we're paying for now (6mbs) and faster speeds we might upgrade to in the future (18mbs).

 

[unclerico]

Changing the MAC address requires that you have a BBA group profile created before attempting to assign a new mac address. I know the link below is for 12.3 but it should still apply. If that doesn't work, try upgrading your IOS to 12.4(22)T:

http://www.cisco.com/en/US/docs/ios/12_3t/12_3t11/feature/guide/gt_cmppp.html

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[silverhairbp]

I've reset the router back to factory defaults, loaded in enough config to get SDM running and tried a few variations to the "first" SDM set-up. I can test the config later when SWMBO calls it a night.

I'll post a sh run after I test.

 

[silverhairbp]

OK, now we seem to be making progress. The router seems to be getting ppp authentication, PPP front panel light is illuminated, not getting the up/down errors.

After the router had booted and completed ppp authentication, I started a web browser. It could not find a couple of web sites so the DNS info is probably wrong. But it took a while so there was communication. I had plugged some DNS values into the config from the Motorola modem, but it would probably be better to get imported values at logon.

I'd like to change the config from fixed name-server to imported without going into SDM. Can't find the commands to do that.

Follows is the current sh run and the console messages.


Router#sh run
Building configuration...

Current configuration : 1800
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1 192.168.1.99
ip dhcp excluded-address 192.168.1.151 192.168.1.254
!
ip dhcp pool sdm-pool1
network 192.168.1.0 255.255.255.0
dns-server 151.164.8.201 66.73.20.40
default-router 192.168.1.1
!
!
!
!
!
username silver privilege 15 secret 5 $1$LG70$UtWsfh/FGnebQboRwUJLV.
!
!
!
!
!
!
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
no snmp trap link-status
pvc 0/35
pppoe-client dial-pool-number 1
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1412
!
interface Dialer0
ip address dhcp
ip mtu 1452
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname [removed]
ppp chap password 0 [removed]
ppp pap sent-username [removed] password 0 [removed]
!
!
!
ip http server
ip http authentication local
no ip http secure-server
ip nat inside source list 1 interface Dialer0 overload
!
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 192.168.1.0 0.0.0.255
dialer-list 1 protocol ip permit
!
!
!
!
control-plane
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
login
!
scheduler max-task-time 5000
!
webvpn context Default_context
ssl authenticate verify all
!
no inservice
!
end

Router#



*Mar 1 00:00:10.691: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern
et0, changed state to up
*Mar 1 00:00:11.315: %LINEPROTO-5-UPDOWN: Line protocol on Interface NVI0, chan
ged state to up
*Mar 1 00:00:11.519: %SYS-5-CONFIG_I: Configured from memory by console
*Mar 5 01:04:42.383: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(6)T6, R
ELEASE SOFTWARE (fc2)
Technical Support:

http://www.cisco.com/techsupport

Copyright (c) 1986-2006 by Cisco Systems, Inc.
Compiled Fri 08-Dec-06 22:44 by kellythw
*Mar 5 01:04:42.383: %SNMP-5-COLDSTART: SNMP agent on host Router is undergoing
a cold start
*Mar 5 01:04:42.475: %CRYPTO-6-ISAKMP_ON_OFF: I
*Mar 5 01:04:43.499: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, cha
nged state to up
*Mar 5 01:04:43.983: %LINK-3-UPDOWN: Interface FastEthernet3, changed state to
up
*Mar 5 01:04:43.983: %LINK-3-UPDOWN: Interface FastEthernet2, changed state to
up
*Mar 5 01:04:43.987: %LINK-3-UPDOWN: Interface FastEthernet1, changed state to
up
*Mar 5 01:04:43.991: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to
up
*Mar 5 01:04:44.983: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern
et3, changed state to down
*Mar 5 01:04:44.983: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern
et2, changed state to down
*Mar 5 01:04:44.987: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern
et1, changed state to down
*Mar 5 01:04:44.991: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthern
et0, changed state to up
*Mar 5 01:05:18.359: %LINK-3-UPDOWN: Interface ATM0, changed state to up
*Mar 5 01:05:19.359: %LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0, chan
ged state to up
*Mar 5 01:06:00.583: %DIALER-6-BIND: Interface Vi1 bound to profile Di0
*Mar 5 01:06:00.595: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state t
o up
*Mar 5 01:06:03.287: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Ac
cess1, changed state to up
Router>
Router>

 

[silverhairbp]

Update -

SDM show no IP address for ATM0.

 

[silverhairbp]

Also, modem information states that ATM encapsulation method is LLC. Does the above config indicate that the ATM encaps method is PPPoE over LLC?

 

[burtsbees]

There will only be an IP address on the dialer interface, not the physical.
The encapsulation question...LLC is Layer Link Control, and basically is a sublayer of Layer 2 of the OSI model. It is the higher of the two, and it links layer 2 to layer 3, for lack of a better explanation. Here is a link that may help to explain (or confuse) things...

http://www.ciscosystems.com/en/US/docs/ios/12_0t/12_0t2/feature/guide/pppllc.html

Commands to accommodate what you need...first, the dhcp stuff for your LAN nodes...

router>en
Router#conf t
Router(config)#ip dhcp pool sdm-pool1
Router(dhcp-config)#import all
Router(dhcp-config)#exit
Router(config)#int di0
Router(config-if)#ppp ipcp dns request
Router(config-if)#(config-if)#ppp ipcp wins request
Router(config-if)#no ip mtu 1452
Router(config-if)#ip tcp adjust-mss 1452
Router(config-if)#end
Router#wr

You want to make the mtu 1492, not 1452. The "ip tcp adjust-mss" command does this for you. This is the standard for adsl. Regular ethernet is 1500.

Burt

 

[burtsbees]

Whoops...copied and pasted too much here...

Router(config-if)#(config-if)#ppp ipcp wins request

you get the idea...

Burt

 

[silverhairbp]

Every step seems a little closer.

Had to use the config editor in SDM to get rid of the dns-server statement.

Follows is the latest running config followed by interface status from SDM and results of a ping test through SDM. Shows DHCP problem on WAN. Also that FastEthernet0 doesn't have an ip address.

After the router information is information pulled from the Motorola modem that successfully connects to AT&T.


Current configuration : 1829 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
resource policy
!
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1 192.168.1.99
ip dhcp excluded-address 192.168.1.151 192.168.1.253
!
ip dhcp pool sdm-pool1
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
!
!
!
!
!
username silver privilege 15 secret 5 $1$LG70$UtWsfh/FGnebQboOuUJLV.
!
!
!
!
!
!
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
no snmp trap link-status
pvc 0/35
pppoe-client dial-pool-number 1
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1412
!
interface Dialer0
ip address dhcp
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname [removed]
ppp chap password 0 [removed]
ppp pap sent-username [removed] password 0 [removed]
ppp ipcp dns request
ppp ipcp wins request
!
!
!
ip http server
ip http authentication local
no ip http secure-server
ip nat inside source list 1 interface Dialer0 overload
!
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 192.168.1.0 0.0.0.255
dialer-list 1 protocol ip permit
!
!
!
!
control-plane
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
login
!
scheduler max-task-time 5000
!
webvpn context Default_context
ssl authenticate verify all
!
no inservice
!
end


Data from SDM:

SDM shows up but no ip address for FastEthernet0 (I'm plugged into FastEthernet0, nothing in 1,2, or 3)
Shows Vlan1 up with ip address 192.168.1.1/24
Shows Dialer0 (ATM0.1) Dynamic IP address

I pinged through SDM and got the following reults:

Checking interface status... Up
Checking for DNS setings... Successful
Checking interface IP address... Failed

Interface IP address :Not assigned received
Interface IP address Typd ynamic
Failure Reason(s)
No IP address for the interface has been obtained. The
interface is configured to obtain an IP address through
DHCP. The remote end may not be configured with a DHCP
server or the DHCP pool may be empty.
Recommended Action(s)
Please contact your ISP or WAN administrator and check
if the server has been configured to lease IP addresses
to the clients connection through DHCP. Retest connection.


Checking ATM PVC status... Up
Checking PPPoE tunnel... UP


Info from Motorola modem:

ATM Information
VPI / VCI 0/35
Protocol PPPoE



PPPoE Information
Session Status: Up
Server MAC Address: 00:10:67:00:c3:45
Session ID: 38817


IP Information
Internet Address 70.225.78.108
Internet Gateway 70.225.79.254
DNS Servers 151.164.8.201 dns1.ksc2mo.sbcglobal.net
66.73.20.40 dns1.bcvloh.sbcglobal.net


IP interfaces
Address Netmask Name
192.168.1.254 255.255.255.0 Ethernet 100BT


Routing Table
Destination Netmask Gateway Interface
- - 70.225.79.254 WAN vcc1
192.168.1.0 255.255.255.0 192.168.1.254 Ethernet 100BT


LAN Information
Modem IP Address 192.168.1.254
Modem Netmask 255.255.255.0
DHCP Address 70.225.78.108


Devices on LAN
IP Address MAC Address Name Status
70.225.78.108 00:0d:bd:99:f2:39 Router Active

 

[burtsbees]

Silver, Silver, Silver...

A while back, I asked that you change these...

Router(config)#int di0
Router(config-if)#no ip add dhcp
Router(config-if)#ip add neg
Router(config-if)#exit
Router(config)#int vlan1
Router(config-if)#no ip tcp adjust-mss 1412
Router(config-if)#end
Router#wr

The dialer, being the logical interface to negotiate sessions and therefor negotiate an IP address rather than get one via dhcp, must have "ip add neg". Also, the vlan1 mss is already adjusted on the dialer interface.

Burt

 

[silverhairbp]

I'll try those tonight. SHMBO is active on the net this evening.

I reset the router "back to factory" and missed these when I did the updates.

I'll post results later this evening.

 

[silverhairbp]

Getting pretty close now.

Tried opening a browser and it timed out.

Used SDM ping and got farther. Router got an interface IP address. Failed at Exit Interface test:

Checking interface status... Up
Checking for DNS setings... Successful
Checking interface IP address... Succesful

Checking exit interface... Failed
Exit Interface found :None
Exit interface found :None


Failure Reason(s)

To test connectivity, SDM tries to ping the configured
DNS servers. However, there is no configured route to
any of the DNS servers through the selected interface.


Recommended Action(s)

Select 'User-specified" option or add a
'host specific/network specific' route through this
interface and retest the connection.



The Motorola modem shows a [internet] gateway at 70.225.79.254 that it picked up. Is the step for picking up this information what we might be missing?