LCP down

[normntwrk]

ASA5505 connected to DSL modem in bridged mode. Several times a day we lose internet connection . AT&T is now blaming our ASA5505 , I still think it is their DSL side of things as the circuit usually comes back up without us doing anything.

I see this is the logs

%ASA-3-403503PPoEPP link down:
%ASA-3-403503PPoEPP link downeer not responding
%ASA-3-403503PPoEPP link down:
%ASA-3-403503PPoEPP link down:LCP down

Any thoughts, tips etc
Thanks
Norm

 

[HungryHouse]

I am in agreement with you norm,

PPPoE is the common standard for the Layer 2 protocol that DSL modems use to negotiate...because your log shows that the "Peer is not responding" this may indicate that their DSLAM in the local CO to you may be having issues.

This is highly unlikely that its your side in my humble opinion given the limited but helpful info...the issue appears to be on the DSL connection, specifically its likely the remote side of the connection.

Good luck wrestling with them

-HH

Real trouble call:
Customer: "I have a huge problem. A friend has put a screensaver on my computer, but every time I move the mouse, it disappears!"

 

[normntwrk]

Thanks for the confirmation of what I have been thinking ...I purchased another ASA as they should have a spare anyway . Now if it still drops out we'll need to push AT&T a little harder.

We don't have many options at that site as it is fed underground across a bi parking lot and Comcast wants several thousand dollars for an install

Norm

 

[burtsbees]

Do you have the MTU set to 1492 in the ASA outgoing interface?

ip access-list extended IP-Options-and-Powerball
deny ip any any winning-powerball-ticket
permit ip any any option any-options
!
class-map ACL-Options-and-Powerball
match access-group name IP-Options-and-Powerball
!
policy-map CoPP-POLICY
class ACL-Options-and-Powerball
drop
!
control-plane
service-policy input CoPP-POLICY

 

[burtsbees]

That'll cause your issue...

ip access-list extended IP-Options-and-Powerball
deny ip any any winning-powerball-ticket
permit ip any any option any-options
!
class-map ACL-Options-and-Powerball
match access-group name IP-Options-and-Powerball
!
policy-map CoPP-POLICY
class ACL-Options-and-Powerball
drop
!
control-plane
service-policy input CoPP-POLICY

 

[normntwrk]

It is set to 1492

mtu inside 1500
mtu outside 1492

Thanks
Norm

 

[burtsbees]

Lol, I saw your other post. You could deb ppp neg and deb ppp authen. But if LCP ever shows up as "open", then yes the connection is truly up at times, and the provider needs to test the line. Whenever I have seen this myself, I have seen two causes:

1. Wrong mss/mtu
2. rusty cable coming in at the demarc

You've ruled out MTU, and as I said if LCP is ever open, then the provider needs to get on the ball

ip access-list extended IP-Options-and-Powerball
deny ip any any winning-powerball-ticket
permit ip any any option any-options
!
class-map ACL-Options-and-Powerball
match access-group name IP-Options-and-Powerball
!
policy-map CoPP-POLICY
class ACL-Options-and-Powerball
drop
!
control-plane
service-policy input CoPP-POLICY

 

[normntwrk]

We'll see what happens when we get this new 5505 plugged in

Thanks
Norm