Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Register Log in
  • Congratulations biv343 on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

ISDN, DDR, NAT - Not playing nicely! Suggestions Welcome!

Status
Not open for further replies.
Frogskins

Frogskins

MIS
Mar 4, 2002
2
US
I have posted this question in many forums with little luck. I'm hoping maybe to find someone here with a little more knowledge than me on this. Customer has 2600 series router with 2 bri interfaces (BRI0/0, BRI0/1). BRI0/1 is in shutdown so we can forget about it. Router is running DDR routing for an Internet connection. The router will dial the ISP (Earthlink), LCp and IPCP phases come up correctly. Once the IPCP phase opens, IPCP attempts to install the negotiated address to Dialer1 interface. Once IPCP does this, DDR promptly drops the connection. I have tried all kinds of configs and at wits end. I have provided the show run, debug ppp negotitation and debug ppp authentication from a standard ping to
***Begin Debugs***
sh ver
Cisco Internetwork Operating System Software
IOS (tm) C2600 Software (C2600-IO3-M), Version 12.0(7)T, RELEASE SOFTWARE (fc2)
Copyright (c) 1986-1999 by cisco Systems, Inc.
Compiled Tue 07-Dec-99 03:30 by phanguye
Image text-base: 0x80008088, data-base: 0x80814F5C

ROM: System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1)

RouterA uptime is 2 weeks, 5 days, 21 hours, 20 minutes
System returned to ROM by reload
System image file is "flash:aaa1314.bin"

cisco 2610 (MPC860) processor (revision 0x202) with 20480K/4096K bytes of memory.
Processor board ID JAB032008A0 (3225098586)
M860 processor: part number 0, mask 49
Bridging software.
X.25 software, Version 3.0.0.
Basic Rate ISDN software, Version 1.1.
1 Ethernet/IEEE 802.3 interface(s)
2 ISDN Basic Rate interface(s)
32K bytes of non-volatile configuration memory.
16384K bytes of processor board System flash (Read/Write)
Configuration register is 0x2102

RouterA#sh run

Using 2456 out of 29688 bytes
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname RouterA
!
boot system flash 1:aaa1314.bin
logging buffered 4096 debugging
enable password XXXXXXXXXXXXX
!
!
!
!
!
ip subnet-zero
ip name-server 11.11.11.1
ip name-server 11.11.11.2
!
ip inspect max-incomplete high 1100
ip inspect one-minute high 1100
ip inspect name Ethernet_0_0 tcp
ip inspect name Ethernet_0_0 udp
ip inspect name Ethernet_0_0 cuseeme
ip inspect name Ethernet_0_0 ftp
ip inspect name Ethernet_0_0 h323
ip inspect name Ethernet_0_0 rcmd
ip inspect name Ethernet_0_0 realaudio
ip inspect name Ethernet_0_0 smtp
ip inspect name Ethernet_0_0 streamworks
ip inspect name Ethernet_0_0 vdolive
ip inspect name Ethernet_0_0 sqlnet
ip inspect name Ethernet_0_0 tftp
ip audit notify log
ip audit po max-events 100
isdn switch-type basic-ni
isdn voice-call-failure 0
!
!
!
interface Ethernet0/0
description connected to EthernetLAN
ip address 10.161.200.254 255.255.255.0
ip access-group 100 in
no ip directed-broadcast
ip nat inside
ip inspect Ethernet_0_0 in
!
interface BRI0/0
description connected to Internet
no ip address
no ip directed-broadcast
ip nat outside
encapsulation ppp
dialer rotary-group 1
isdn switch-type basic-ni
isdn spid1 12345678900101
isdn spid2 12345678910101
no cdp enable
!
interface BRI0/1
no ip address
no ip directed-broadcast
shutdown
isdn switch-type basic-ni
!
interface Dialer1
description connected to Internet
bandwidth 64
ip address negotiated
no ip directed-broadcast
ip nat outside
encapsulation ppp
no ip split-horizon
dialer in-band
dialer idle-timeout 900
dialer wait-for-carrier-time 20
dialer string 2345678
dialer hold-queue 10
dialer load-threshold 10 outbound
dialer-group 1
no cdp enable
ppp authentication pap callin
ppp pap sent-username me@wherever.com password 7 XXXXXXXXXXX
ppp ipcp accept-address
!
ip nat inside source list 1 interface Dialer1 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
ip route 10.161.0.0 255.255.0.0 10.161.200.1
no ip http server
!
access-list 1 permit 10.161.200.0 0.0.0.255
access-list 1 permit 10.161.0.0 0.0.255.255
access-list 100 permit ip any any
access-list 101 deny ip any any
dialer-list 1 protocol ip permit
snmp-server engineID local 00000009020000D058AC1820
!
line con 0
exec-timeout 0 0
password XXXXXXXXX
login
transport input none
line aux 0
line vty 0 4
password XXXXXXXX
login
!
end

RouterA#
RouterA#
RouterA#
RouterA#ping cisco.com
Translating " server (11.11.11.1)
2w5d: NAT: o: udp (10.161.200.254, 4487) -> (11.11.11.1, 53) [0]
2w5d: NAT: i: udp (10.161.200.254, 4487) -> (11.11.11.1, 53) [0]
2w5d: BRI0/0 DDR: rotor dialout [priority]
2w5d: BRI0/0 DDR: Dialing cause ip (s=10.161.200.254, d=11.11.11.1)
2w5d: BRI0/0 DDR: Attempting to dial 2345678
2w5d: %LINK-3-UPDOWN: Interface BRI0/0:1, changed state to up
2w5d: %ISDN-6-CONNECT: Interface BRI0/0:1 is now connected to 2345678
2w5d: BR0/0:1 PPP: Treating connection as a callout
2w5d: BR0/0:1 PPP: Phase is ESTABLISHING, Active Open
2w5d: BR0/0:1 PPP: No remote authentication for call-out
2w5d: BR0/0:1 LCP: O CONFREQ [Closed] id 29 len 10
2w5d: BR0/0:1 LCP: MagicNumber 0x36C68115 (0x050636C68115)
2w5d: NAT: o: udp (10.161.200.254, 4487) -> (11.11.11.1, 53) [1]
2w5d: NAT: i: udp (10.161.200.254, 4487) -> (11.11.11.1, 53) [1]
2w5d: NAT: o: udp (10.161.200.254, 4487) -> (11.11.11.1, 53) [2]
2w5d: NAT: i: udp (10.161.200.254, 4487) -> (11.11.11.1, 53) [2]
2w5d: BR0/0:1 LCP: TIMEout: State REQsent
2w5d: BR0/0:1 LCP: O CONFREQ [REQsent] id 30 len 10
2w5d: BR0/0:1 LCP: MagicNumber 0x36C68115 (0x050636C68115)
2w5d: BR0/0:1 LCP: I CONFREQ [REQsent] id 1 len 29
2w5d: BR0/0:1 LCP: VendorSpecific OUI (0x00040000)
2w5d: BR0/0:1 LCP: MRU 1524 (0x010405F4)
2w5d: BR0/0:1 LCP: AuthProto PAP (0x0304C023)
2w5d: BR0/0:1 LCP: MRRU 1524 (0x110405F4)
2w5d: BR0/0:1 LCP: EndpointDisc 3 00c0.7b9b.6221 (0x13090300C07B9B6221)
2w5d: BR0/0:1 LCP: O CONFREJ [REQsent] id 1 len 21
2w5d: BR0/0:1 LCP: VendorSpecific OUI (0x00040000)
2w5d: BR0/0:1 LCP: MRRU 1524 (0x110405F4)
2w5d: BR0/0:1 LCP: EndpointDisc 3 00c0.7b9b.6221 (0x13090300C07B9B6221)
2w5d: BR0/0:1 LCP: I CONFACK [REQsent] id 30 len 10
2w5d: BR0/0:1 LCP: MagicNumber 0x36C68115 (0x050636C68115)
2w5d: BR0/0:1 LCP: I CONFREQ [ACKrcvd] id 2 len 12
2w5d: BR0/0:1 LCP: MRU 1524 (0x01 (11.11.11.2)0405F4)
2w5d: BR0/0:1 LCP: AuthProto PAP (0x0304C023)
2w5d: BR0/0:1 LCP: O CONFACK [ACKrcvd] id 2 len 12
2w5d: BR0/0:1 LCP: MRU 1524 (0x010405F4)
2w5d: BR0/0:1 LCP: AuthProto PAP (0x0304C023)
2w5d: BR0/0:1 LCP: State is Open
2w5d: BR0/0:1 PPP: Phase is AUTHENTICATING, by the peer
2w5d: BR0/0:1 PAP: O AUTH-REQ id 81 len 27 from "me@wherever.com"
2w5d: BR0/0:1 PAP: I AUTH-ACK id 81 len 26 msg is "Packet mode enabled: "
2w5d: BR0/0:1 PPP: Phase is UP
2w5d: BR0/0:1 IPCP: O CONFREQ [Closed] id 161 len 10
2w5d: BR0/0:1 IPCP: Address 0.0.0.0 (0x030600000000)
2w5d: BR0/0:1 IPCP: I CONFREQ [REQsent] id 1 len 16
2w5d: BR0/0:1 IPCP: CompressType VJ 15 slots CompressSlotID (0x0206002D0F01)
2w5d: BR0/0:1 IPCP: Address 63.175.136.11 (0x03063FAF880B)
2w5d: BR0/0:1 IPCP: Accept the peer address 63.175.136.11
2w5d: BR0/0:1 IPCP: O CONFREJ [REQsent] id 1 len 10
2w5d: BR0/0:1 IPCP: CompressType VJ 15 slots CompressSlotID (0x0206002D0F01)
2w5d: BR0/0:1 IPCP: I CONFNAK [REQsent] id 161 len 10
2w5d: BR0/0:1 IPCP: Address 64.91.146.78 (0x0306405B924E)
2w5d: BR0/0:1 IPCP: O CONFREQ [REQsent] id 162 len 10
2w5d: BR0/0:1 IPCP: Address 64.91.146.78 (0x0306405B924E)
2w5d: BR0/0:1 IPCP: I CONFREQ [REQsent] id 2 len 10
2w5d: BR0/0:1 IPCP: Address 63.175.136.11 (0x03063FAF880B)
2w5d: BR0/0:1 IPCP: Accept the peer address 63.175.136.11
2w5d: BR0/0:1 IPCP: O CONFACK [REQsent] id 2 len 10
2w5d: BR0/0:1 IPCP: Address 63.175.136.11 (0x03063FAF880B)
2w5d: BR0/0:1 IPCP: I CONFACK [ACKsent] id 162 len 10
2w5d: BR0/0:1 IPCP: Address 64.91.146.78 (0x0306405B924E)
2w5d: BR0/0:1 IPCP: State is Open
2w5d: Di1 IPCP: Install negotiated IP interface address 64.91.146.78
2w5d: NAT: IP address has changed on inetrface Dialer1 : 64.91.146.78
2w5d: BRI0/0:1 DDR: disconnecting call
2w5d: BRI0/0:2 DDR: disconnecting call
2w5d: %ISDN-6-DISCONNECT: Interface BRI0/0:1 disconnected from 2345678 , call lasted 5 seconds
2w5d: %LINK-3-UPDOWN: Interface BRI0/0:1, changed state to down
2w5d: DDR: Call disconnected, 0 packets unqueued and discarded
2w5d: NAT: IP address has changed on inetrface Dialer1 : 64.91.146.78
2w5d: BR0/0:1 IPCP: State is Closed
2w5d: BR0/0:1 PPP: Phase is TERMINATING
2w5d: BR0/0:1 LCP: State is Closed
2w5d: BR0/0:1 PPP: Phase is DOWN
2w5d: BRI0/0:1 DDR: disconnecting call
2w5d: BRI0/0:1 DDR: dialer protocol up
2w5d: Di1 IPCP: Install route to 63.175.136.11
2w5d: Di1 IPCP: Remove route to 63.175.136.11
2w5d: %ISDN-6-LAYER2UP: Layer 2 for Interface BR0/0, TEI 112 changed to up
2w5d: %ISDN-6-LAYER2UP: Layer 2 for Interface BR0/0, TEI 65 changed to up
2w5d: NAT: o: udp (10.161.200.254, 5227) -> (11.11.11.2, 53) [0]
2w5d: NAT: i: udp (10.161.200.254, 5227) -> (11.11.11.2, 53) [0]
2w5d: BRI0/0 DDR: rotor dialout [priority]
2w5d: BRI0/0 DDR: Dialing cause ip (s=10.161.200.254, d=11.11.11.2)
2w5d: BRI0/0 DDR: Attempting to dial 2345678
2w5d: %LINK-3-UPDOWN: Interface BRI0/0:1, changed state to up
2w5d: %ISDN-6-CONNECT: Interface BRI0/0:1 is now connected to 2345678
2w5d: BR0/0:1 PPP: Treating connection as a callout
2w5d: BR0/0:1 PPP: Phase is ESTABLISHING, Active Open
2w5d: BR0/0:1 PPP: No remote authentication for call-out
2w5d: BR0/0:1 LCP: O CONFREQ [Closed] id 31 len 10
2w5d: BR0/0:1 LCP: MagicNumber 0x36C6A458 (0x050636C6A458)
2w5d: NAT: o: udp (10.161.200.254, 5227) -> (11.11.11.2, 53) [1]
2w5d: NAT: i: udp (10.161.200.254, 5227) -> (11.11.11.2, 53) [1]
2w5d: NAT: o: udp (10.161.200.254, 5227) -> (11.11.11.2, 53) [2]
2w5d: NAT: i: udp (10.161.200.254, 5227) -> (11.11.11.2, 53) [2]
2w5d: BR0/0:1 LCP: TIMEout: State REQsent
2w5d: BR0/0:1 LCP: O CONFREQ [REQsent] id 32 len 10
2w5d: BR0/0:1 LCP: MagicNumber 0x36C6A458 (0x050636C6A458)
2w5d: BR0/0:1 LCP: I CONFREQ [REQsent] id 1 len 29
2w5d: BR0/0:1 LCP: VendorSpecific OUI (0x00040000)
2w5d: BR0/0:1 LCP: MRU 1524 (0x010405F4)
2w5d: BR0/0:1 LCP: AuthProto PAP (0x0304C023)
2w5d: BR0/0:1 LCP: MRRU 1524 (0x110405F4)
2w5d: BR0/0:1 LCP: EndpointDisc 3 00c0.7b9b.6221 (0x13090300C07B9B6221)
2w5d: BR0/0:1 LCP: O CONFREJ [REQsent] id 1 len 21
2w5d: BR0/0:1 LCP: VendorSpecific OUI (0x00040000)
2w5d: BR0/0:1 LCP: MRRU 1524 (0x110405F4)
2w5d: BR0/0:1 LCP: EndpointDisc 3 00c0.7b9b.6221 (0x13090300C07B9B6221)
2w5d: BR0/0:1 LCP: I CONFACK [REQsent] id 32 len 10
2w5d: BR0/0:1 LCP: MagicNumber 0x36C6A458 (0x050636C6A458)
2w5d: BR0/0:1 LCP: I CONFREQ [ACKrcvd] id 2 len 12
2w5d: BR0/0:1 LCP: MRU 1524 (0x01
% Unrecognized host or address, or protocol not running.

RouterA#0405F4)
2w5d: BR0/0:1 LCP: AuthProto PAP (0x0304C023)
2w5d: BR0/0:1 LCP: O CONFACK [ACKrcvd] id 2 len 12
2w5d: BR0/0:1 LCP: MRU 1524 (0x010405F4)
2w5d: BR0/0:1 LCP: AuthProto PAP (0x0304C023)
2w5d: BR0/0:1 LCP: State is Open
2w5d: BR0/0:1 PPP: Phase is AUTHENTICATING, by the peer
2w5d: BR0/0:1 PAP: O AUTH-REQ id 82 len 27 from "me@wherever.com"
2w5d: BR0/0:1 PAP: I AUTH-ACK id 82 len 26 msg is "Packet mode enabled: "
2w5d: BR0/0:1 PPP: Phase is UP
2w5d: BR0/0:1 IPCP: O CONFREQ [Closed] id 163 len 10
2w5d: BR0/0:1 IPCP: Address 0.0.0.0 (0x030600000000)
2w5d: BR0/0:1 IPCP: I CONFREQ [REQsent] id 1 len 16
2w5d: BR0/0:1 IPCP: CompressType VJ 15 slots CompressSlotID (0x0206002D0F01)
2w5d: BR0/0:1 IPCP: Address 63.175.136.11 (0x03063FAF880B)
2w5d: BR0/0:1 IPCP: Accept the peer address 63.175.136.11
2w5d: BR0/0:1 IPCP: O CONFREJ [REQsent] id 1 len 10
2w5d: BR0/0:1 IPCP: CompressType VJ 15 slots CompressSlotID (0x0206002D0F01)
2w5d: BR0/0:1 IPCP: I CONFNAK [REQsent] id 163 len 10
2w5d: BR0/0:1 IPCP: Address 64.91.147.216 (0x0306405B93D8)
2w5d: BR0/0:1 IPCP: O CONFREQ [REQsent] id 164 len 10
2w5d: BR0/0:1 IPCP: Address 64.91.147.216 (0x0306405B93D8)
2w5d: BR0/0:1 IPCP: I CONFREQ [REQsent] id 2 len 10
2w5d: BR0/0:1 IPCP: Address 63.175.136.11 (0x03063FAF880B)
2w5d: BR0/0:1 IPCP: Accept the peer address 63.175.136.11
2w5d: BR0/0:1 IPCP: O CONFACK [REQsent] id 2 len 10
2w5d: BR0/0:1 IPCP: Address 63.175.136.11 (0x03063FAF880B)
2w5d: BR0/0:1 IPCP: I CONFACK [ACKsent] id 164 len 10
2w5d: BR0/0:1 IPCP: Address 64.91.147.216 (0x0306405B93D8)
2w5d: BR0/0:1 IPCP: State is Open
2w5d: Di1 IPCP: Install negotiated IP interface address 64.91.147.216
2w5d: NAT: IP address has changed on inetrface Dialer1 : 64.91.147.216
2w5d: BRI0/0:1 DDR: disconnecting call
2w5d: BRI0/0:2 DDR: disconnecting call
2w5d: %ISDN-6-DISCONNECT: Interface BRI0/0:1 disconnected from 2345678 , call lasted 5 seconds
2w5d: %LINK-3-UPDOWN: Interface BRI0/0:1, changed state to down
2w5d: DDR: Call disconnected, 0 packets unqueued and discarded
2w5d: NAT: IP address has changed on inetrface Dialer1 : 64.91.147.216
2w5d: BR0/0:1 IPCP: State is Closed
2w5d: BR0/0:1 PPP: Phase is TERMINATING
2w5d: BR0/0:1 LCP: State is Closed
2w5d: BR0/0:1 PPP: Phase is DOWN
2w5d: BRI0/0:1 DDR: disconnecting call
2w5d: BRI0/0:1 DDR: dialer protocol up
2w5d: Di1 IPCP: Install route to 63.175.136.11
2w5d: Di1 IPCP: Remove route to 63.175.136.11
2w5d: %ISDN-6-LAYER2UP: Layer 2 for Interface BR0/0, TEI 112 changed to up
2w5d: %ISDN-6-LAYER2UP: Layer 2 for Interface BR0/0, TEI 65 changed to up
RouterA#
 
Sort by date Sort by votes
disable ip inspect
remove ipcp accept-address
then try
 
Upvote 0 Downvote
As you can see from below I used your config file to see whether I can connect or not ,but first I had to modify few things like SPID we don't use them in the UK, Username, Password, Dialing String, and I can connect without any problem.

Note
I removed ppp ipcp accept-address. My advise to you is to create a simple DDR config and see if you can connect, once you achieved that try too tweak it.

interface BRI0
description connected to Internet
no ip address
no ip directed-broadcast
encapsulation ppp
dialer rotary-group 1
!
interface Dialer1
description connected to Internet
bandwidth 64
ip address negotiated
no ip directed-broadcast
ip nat outside
encapsulation ppp
no ip split-horizon
dialer in-band
dialer idle-timeout 900
dialer wait-for-carrier-time 20
dialer string 08451111111
dialer hold-queue 10
dialer load-threshold 10 outbound
dialer-group 1
no cdp enable
ppp authentication pap callin
ppp pap sent-username (username) password (password)

ip nat inside source list 1 interface Dialer1 overload
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
access-list 100 permit ip any any
dialer-list 1 protocol ip permit

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Don't be content with being average. Average is as close to the bottom as it is to the top
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
Upvote 0 Downvote
Status
Not open for further replies.

Similar threads

MontrealSoft
  • Locked
  • Question
Heated cabinets suggestions
Replies
2
Views
259
MontrealSoft
MontrealSoft
telemarksman
  • Locked
  • Question
ATA Cisco SPA122 not triggering single line courtesy phone ringer
Replies
0
Views
169
telemarksman
telemarksman
darktriad
  • Locked
  • Question
Cisco ASA 9.4: Configuring NAT
Replies
0
Views
206
darktriad
darktriad
rmartinezv82
  • Locked
  • Question
Issue with port not have comunication Switch 3750X
Replies
1
Views
143
burtsbees
burtsbees
netguy2000
  • Locked
  • Question
Cisco router 1841 NAT/PAT problem
Replies
0
Views
137
netguy2000
netguy2000

Part and Inventory Search

Sponsor

Back
Top