Cisco 2610 und SDSL PPPoE Einwahl

[Sickgolem]

Hallo,

habe ein Problem mit einem 2610 an einer SDSL Leitung mit fixer IP der T-Com.

Problem ist das ich die Einwahl per PPOE nicht hinbekomme.
Freue mich auf Hilfe.

Hier mal ein sh running und ein debug ppp auth

2MBSDSL>enable
Password:
2MBSDSL#show running
Building configuration...

Current configuration : 1269 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname 2MBSDSL
!
boot-start-marker
boot-end-marker
!
enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxx
enable password xxxxxxxxxxxxxxxx!
no aaa new-model
ip subnet-zero
ip cef
!
!
!
!
vpdn enable
!
vpdn-group 1
request-dialin
protocol pppoe
!
no ftp-server write-enable
!
!
!
!
interface Ethernet0/0
description SDSL
no ip address
ip nat outside
full-duplex
pppoe enable
pppoe-client dial-pool-number 1
!
interface Ethernet1/0
description Internes Lan
ip address 192.168.0.200 255.255.255.0
ip nat inside
full-duplex
!
interface Dialer1
ip address negotiated
ip mtu 1492
ip nat outside
encapsulation ppp
no ip route-cache
ip tcp adjust-mss 1452
no ip mroute-cache
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication pap callin
description T-Com SDSL mit fester ip
ppp pap sent-username t-online-com/fest.ipxxx.xxx.xxx.x/userxxxxxxxxxxx@t-online-com.de password 0 xxxxxxxxxxxxxxx
!
no ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
no ip http server
ip nat inside source list 1 interface Dialer1 overload
!
!
access-list 1 permit any
dialer-list 1 protocol ip permit
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
password xxxx
login
!

!
end

2MBSDSL#



Und hier nun mal ein deb ppp auth

2MBSDSL#terminal monitor
2MBSDSL#debug ppp auth
PPP authentication debugging is on
2MBSDSL#
2MBSDSL#
*Mar 1 04:54:23.074: %DIALER-6-BIND: Interface Vi1 bound to profile Di1
*Mar 1 04:54:23.074: Vi1 PPP: Using dialer call direction
*Mar 1 04:54:23.078: Vi1 PPP: Treating connection as a callout
*Mar 1 04:54:23.078: Vi1 PPP: Authorization required
*Mar 1 04:54:23.078: Vi1 PPP: No remote authentication for call-out
*Mar 1 04:54:23.082: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up
*Mar 1 04:54:23.082: Vi1 DDR: Dialer statechange to up
*Mar 1 04:54:23.142: Vi1 PPP: No authorization without authentication
*Mar 1 04:54:23.142: Vi1 PAP: Using hostname from interface PAP
*Mar 1 04:54:23.142: Vi1 PAP: Using password from interface PAP
*Mar 1 04:54:23.142: Vi1 PAP: O AUTH-REQ id 1 len 69 from "t-online-com/xxx.xxx.xxx.x/xxxxxxxxxxxxxxxxx@t-online-com.de"
*Mar 1 04:54:23.679: Vi1 PAP: I AUTH-NAK id 1 len 24 msg is "Zugriff verweigert "
*Mar 1 04:54:23.691: %DIALER-6-UNBIND: Interface Vi1 unbound from profile Di1
*Mar 1 04:54:23.699: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to down
*Mar 1 04:54:46.187: %DIALER-6-BIND: Interface Vi1 bound to profile Di1
*Mar 1 04:54:46.187: Vi1 PPP: Using dialer call direction
*Mar 1 04:54:46.187: Vi1 PPP: Treating connection as a callout
*Mar 1 04:54:46.191: Vi1 PPP: Authorization required
*Mar 1 04:54:46.191: Vi1 PPP: No remote authentication for call-out
*Mar 1 04:54:46.191: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up
*Mar 1 04:54:46.195: Vi1 DDR: Dialer statechange to up
*Mar 1 04:54:46.264: Vi1 PPP: No authorization without authentication
*Mar 1 04:54:46.264: Vi1 PAP: Using hostname from interface PAP
*Mar 1 04:54:46.264: Vi1 PAP: Using password from interface PAP
*Mar 1 04:54:46.264: Vi1 PAP: O AUTH-REQ id 1 len 69 from "t-online-com/xxx.xxxxxx./xxxxxxxxxxxxx@t-online-com.de"
*Mar 1 04:54:46.480: Vi1 PAP: I AUTH-NAK id 1 len 24 msg is "Zugriff verweigert "

[thorgood]

Hallo Sickgolem

Willkommen im Board.

Vom Grundgerüst her sollte das so aussehen.

!
hostname 2MBSDSL
!
vpdn enable
!
vpdn-group 1
request-dialin
protocol pppoe
!
interface Ethernet0/0
no ip address
pppoe enable
pppoe-client dial-pool-number 1
!
interface Ethernet1/0
ip address 192.168.0.200 255.255.255.0
ip nat inside
!
interface Dialer1
ip address 217.xxx.xxx.xxx 255.255.255.248
ip mtu 1492
ip nat outside
encapsulation ppp
ip tcp adjust-mss 1452
no ip route-cache
no ip mroute-cache
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname t-online-com/fest.ipxxx.xxx.xxx.x/userxxxxxxxxxxx@t-online-com.de
ppp chap password 7 xxxxxx
ppp pap sent-username t-online-com/fest.ipxxx.xxx.xxx.x/userxxxxxxxxxxx@t-online-com.de password 7 xxxxxx
!
ip nat inside source list 1 interface Dialer1 overload
ip route 0.0.0.0 0.0.0.0 Dialer1
!
access-list 1 permit 192.168.0.0 0.0.0.255
!

thorgood

[Sickgolem]

Hallo,

Danke erst mal für das freundliche Wilkommen.
Ich checke deine Angaben mal und melde mich.

[Sickgolem]

Hallo,

habe die config etwas geändert.
Anbei die show running.
Problem ist aber leider noch immer vorhanden.
Hat vielleicht jemand einen Tip,



!
version 12.3
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname 2MBSDSL
!
boot-start-marker
boot-end-marker
!
enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxxxx
enable password xxxxxxxxxxxxxxxx
!
no aaa new-model
no ip subnet-zero
no ip cef
!
!
!
!
vpdn enable
!
vpdn-group 1
request-dialin
protocol pppoe
!
no ftp-server write-enable
!
!
!
!
interface Ethernet0/0
description SDSL
no ip address
ip nat outside
full-duplex
pppoe enable
pppoe-client dial-pool-number 1
!
interface Ethernet1/0
description Internes Lan
ip address 192.168.0.200 255.255.255.0
ip nat inside
full-duplex
!
interface Dialer1
ip address negotiated
ip mtu 1492
ip nat outside
encapsulation ppp
no ip route-cache
ip tcp adjust-mss 1452
no ip mroute-cache
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap pap callin
ppp chap hostname t-online-com217.xxx.xxx.xxxTBxxxxxxx...-online-com.de
ppp chap password 0 xxxxxxxxxxxxxx
ppp pap sent-username t-online-com217.xxx.xxx.xxxTBxxxxxxxx@t-online-com.de password 0 xxxxxx
!
no ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
no ip http server
ip nat inside source list 1 interface Dialer1 overload
!
!
access-list 1 permit any
access-list 1 permit 192.168.0.0 0.0.0.255
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
password xxxxxxx
login
!
!
end

2MBSDSL#


%DIALER-6-BIND: Interface Vi1 bound to profile Di1
00:04:17: Vi1 PPP: Using dialer call direction
00:04:17: Vi1 PPP: Treating connection as a callout
00:04:17: Vi1 PPP: Authorization required
00:04:17: Vi1 PPP: No remote authentication for call-out
00:04:17: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up
00:04:17: Vi1 PPP: No authorization without authentication
00:04:17: Vi1 PAP: Using hostname from interface PAP
00:04:17: Vi1 PAP: Using password from interface PAP
00:04:17: Vi1 PAP: O AUTH-REQ id 1 len 67 from "t-online-com217.xxx.xxx.xxxTBxxxxxxxxxx@t-online-com.de"
00:04:17: Vi1 PAP: I AUTH-NAK id 1 len 39 msg is "0012 PSFFM002 0345625243 test user"
00:04:17: %DIALER-6-UNBIND: Interface Vi1 unbound from profile Di1
00:04:17: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to down


hier mal meine runnining conf.

Stehe echt auf dem Schlauch.

[thorgood]

Bist du dir sicher das du die feste öffentliche IP nicht angeben musst.

[Sickgolem]

Hi,

denke ich brauch die Ip nicht.
Aber du Hast schon Recht checke es noch mal mit dem Eintrag

interface Dialer1
ip address 217.xxx.xxx.xxx 255.255.255.255

Melde mich gleich.

[Sickgolem]

Gleiches problem
Komisch ist die Antwort die ich auf dem Router von der
genstelle bekomme.


Vi1 PAP: I AUTH-NAK id 1 len 39 msg is "0012 PSFFM002 0345625243 test user"

[texmecx]

---------------------------------
ppp chap password 0 xxxxxxxxxxxxxx
---------------------------------

..hier ist das Problem !

muss folgendermassen lauten:

ppp chap password 7 xxxxxxxxxxx

Das gleiche gilt natürlich auch für:

ppp pap sent-username t-online-com217.xxx.xxx.xxxTBxxxxxxxx@t-online-com.de password 7 xxxxxx

cu
Claus