Einwahlprobleme über ISDN bei einem Cisco Router 876

[Ghostolani]

Hallo,
ich habe eine Problem bei einem Cisco Router 876. Die Remote Verbindung über ISDN zur Wartung bricht immer wieder ab. Es kommt kein Verbindungsaufbau zu stande. Im Anschluss der Debug. Kann mir jemand einen Tip geben wo ich mit suchen anfangen soll? Danke schon mal im vorraus ...

ay 26 18:31:55.113: ISDN BR0 Q931: RX <- SETUP pd = 8 callref = 0x01
Sending Complete
Bearer Capability i = 0x8890
Standard = CCITT
Transfer Capability = Unrestricted Digital
Transfer Mode = Circuit
Transfer Rate = 64 kbit/s
Channel ID i = 0x89
Exclusive, B1
Calling Party Number i = 0x2181, '351XXXXXXXX'
Plan:ISDN, Type:National
Called Party Number i = 0xC1, 'XXXXXXX'
Plan:ISDN, Type:Subscriber(local)
*May 26 18:31:55.117: BR0:1 DDR: Caller id 351XXXXXXX matched to profile IT1_Mgmt
*May 26 18:31:55.117: BR0:1: interface must be fifo queue, force fifo
*May 26 18:31:55.117: %DIALER-6-BIND: Interface BR0:1 bound to profile Di3
*May 26 18:31:55.121: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 351XXXXXXX N/A
c876W_SVS-AD_V3#
*May 26 18:31:55.121: ISDN BR0 Q931: TX -> CALL_PROC pd = 8 callref = 0x81
Channel ID i = 0x89
Exclusive, B1
*May 26 18:31:55.125: BR0:1 PPP: Using dialer call direction
*May 26 18:31:55.125: BR0:1 PPP: Treating connection as a callin
*May 26 18:31:55.125: BR0:1 PPP: Session handle[A5000014] Session id[15]
*May 26 18:31:55.125: BR0:1 PPP: Phase is ESTABLISHING, Passive Open
*May 26 18:31:55.125: BR0:1 LCP: State is Listen
*May 26 18:31:55.145: ISDN BR0 Q931: TX -> CONNECT pd = 8 callref = 0x81
*May 26 18:31:55.305: ISDN BR0 Q931: RX <- CONNECT_ACK pd = 8 callref = 0x01
c876W_SVS-AD_V3#
*May 26 18:31:57.109: BR0:1 LCP: Timeout: State Listen
*May 26 18:31:57.109: BR0:1 PPP: Authorization required
*May 26 18:31:57.109: BR0:1 LCP: O CONFREQ[Listen] id 81 len 15
*May 26 18:31:57.109: BR0:1 LCP: AuthProto CHAP (0x0305C22305)
*May 26 18:31:57.109: BR0:1 LCP: MagicNumber 0x1BFB2D40 (0x05061BFB2D40)
c876W_SVS-AD_V3#
*May 26 18:31:59.124: BR0:1 LCP: Timeout: State REQsent
*May 26 18:31:59.124: BR0:1 LCP: O CONFREQ [REQsent] id 82 len 15
*May 26 18:31:59.124: BR0:1 LCP: AuthProto CHAP (0x0305C22305)
*May 26 18:31:59.124: BR0:1 LCP: MagicNumber 0x1BFB2D40 (0x05061BFB2D40)
c876W_SVS-AD_V3#
*May 26 18:32:01.120: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 351XXXXXXX N/A
c876W_SVS-AD_V3#
*May 26 18:32:01.140: BR0:1 LCP: Timeout: State REQsent
*May 26 18:32:01.140: BR0:1 LCP: O CONFREQ [REQsent] id 83 len 15
*May 26 18:32:01.140: BR0:1 LCP: AuthProto CHAP (0x0305C22305)
*May 26 18:32:01.140: BR0:1 LCP: MagicNumber 0x1BFB2D40 (0x05061BFB2D40)
c876W_SVS-AD_V3#
*May 26 18:32:17.264: BR0:1 LCP: Timeout: State REQsent
*May 26 18:32:17.264: BR0:1 DDR: disconnecting call
*May 26 18:32:17.264: BR0:1 LCP: State is Listen
*May 26 18:32:17.264: %ISDN-6-DISCONNECT: Interface BRI0:1 disconnected from 351XXXXXXX , call lasted 22 seconds
*May 26 18:32:17.264: ISDN BR0 Q931: TX -> DISCONNECT pd = 8 callref = 0x81
Cause i = 0x8090 - Normal call clearing
*May 26 18:32:17.392: ISDN BR0 Q931: RX <- RELEASE pd = 8 callref = 0x01
*May 26 18:32:17.396: BR0 DDR: has total 0 call(s), dial_out 0, dial_in 0
*May 26 18:32:17.396: %DIALER-6-UNBIND: Interface BR0:1 unbound from profile Di3
c876W_SVS-AD_V3#
*May 26 18:32:17.396: ISDN BR0 Q931: TX -> RELEASE_COMP pd = 8 callref = 0x81
*May 26 18:32:17.396: BR0:1 PPP: Sending Acct Event[Down] id[16]
*May 26 18:32:17.396: BR0:1 LCP: State is Closed
*May 26 18:32:17.396: BR0:1 PPP: Phase is DOWN

[blackbox]

Hi,

kannst du mal das Chap debuggen - den das kommt nicht zum Erfolg.

[Ghostolani]

Guten Morgen,

debugg ppp authentication bringt folgenden Log nach einmaliger Anwahl. Gibt es noch einen debugg genau für chap -- kann den gerade nicht finden ...

May 23 19:44:28.805: %DIALER-6-BIND: Interface BR0:1 bound to profile Di3
*May 23 19:44:28.809: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 351XXXXXXX N/A
c876W_SVS-AD_V3#
*May 23 19:44:28.825: BR0:1 PPP: Using dialer call direction
*May 23 19:44:28.825: BR0:1 PPP: Treating connection as a callin
*May 23 19:44:28.825: BR0:1 PPP: Session handle[EB000002] Session id[1]
c876W_SVS-AD_V3#
*May 23 19:44:30.801: BR0:1 PPP: Authorization required
c876W_SVS-AD_V3#
*May 23 19:44:34.808: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 351XXXXXXX N/A
c876W_SVS-AD_V3#
*May 23 19:44:50.956: %ISDN-6-DISCONNECT: Interface BRI0:1 disconnected from 351XXXXXXX , call lasted 22 seconds
*May 23 19:44:51.088: %DIALER-6-UNBIND: Interface BR0:1 unbound from profile Di3

[DocZenith]

Wie sieht denn deine Einwahlconfig auf dem Router aus?

[Ghostolani]

hostname XXX
!
boot-start-marker
boot-end-marker
!
logging buffered 8192
enable secret level 2 5 XXX
!
aaa new-model
!
!
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.0 192.168.1.100
!
ip dhcp pool SVS-AD
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
lease 0 2
!
!
no ip bootp server
ip host ASA-ST1 80.150.23.189
ip host ASA-ST2 62.206.215.121
ip host CONC-ST1 62.206.215.4
ip host CONC-ST2 193.159.174.132
!
multilink bundle-name authenticated
isdn switch-type basic-net3
!
!
username XXX privilege 15 password 7 XXX
username XXX privilege 15 password 7 XXX
username XXX privilege 15 password 7 XXX
!
!
archive
log config
hidekeys
!
!
!
track 1 rtr 1 reachability
!
track 2 rtr 2 reachability
!
track 3 rtr 3 reachability
!
track 4 rtr 4 reachability
!
track 5 list boolean and
object 1 not
object 2 not
object 3 not
object 4 not
!
track 6 list boolean or
object 1
object 2
object 3
object 4
!
[...]
!
bridge irb
!
!
interface BRI0
description ISDN Port
no ip address
encapsulation ppp
dialer pool-member 2
dialer pool-member 3
isdn switch-type basic-net3
isdn point-to-point-setup
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
[...]
!
interface Dialer3
description Remote Management SVS-IT1
bandwidth 64
ip address 192.168.2.1 255.255.255.0
ip access-group 103 in
ip access-group 103 out
encapsulation ppp
load-interval 30
dialer pool 3
dialer remote-name IT1_Mgmt
dialer idle-timeout 360
dialer caller 351XXXXXXXX
dialer hold-queue 16
dialer load-threshold 64 either
dialer max-call 1
dialer-group 3
no fair-queue
no cdp enable
ppp authentication chap
!
[...]
!
interface BVI1
description virtuelles BridgeGroup Interface fuer die LAN und WLAN
ip address 192.168.1.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
ip flow egress
ip nat inside
ip virtual-reassembly
!
ip local policy route-map rm
ip forward-protocol nd
ip route 80.150.23.189 255.255.255.255 Dialer1 name ASA-ST1 track 1
ip route 62.206.215.121 255.255.255.255 Dialer1 name ASA-ST2 track 2
ip route 0.0.0.0 0.0.0.0 Dialer2 track 5
ip route 0.0.0.0 0.0.0.0 Dialer1 track 6
!
ip flow-top-talkers
top 50
sort-by bytes
cache-timeout 1200
!
ip http server
ip http authentication local
ip http secure-server
ip nat translation icmp-timeout 1
ip nat inside source route-map nat_via_dsl interface Dialer1 overload
ip nat inside source route-map nat_via_isdn interface Dialer2 overload
!
[....]
!
logging trap warnings
access-list 10 permit 192.168.147.0 0.0.0.255
access-list 10 permit 10.128.17.0 0.0.0.255
access-list 10 permit 62.206.215.0 0.0.0.127
access-list 10 permit 193.159.174.128 0.0.0.127
access-list 10 permit 62.245.183.0 0.0.0.127
access-list 10 permit 62.156.144.0 0.0.0.127
access-list 10 permit 192.168.1.0 0.0.0.255
access-list 10 permit 192.168.2.0 0.0.0.255
access-list 10 permit 172.25.0.0 0.0.255.255
[...]
access-list 103 permit ip 10.248.0.0 0.7.255.255 host 192.168.2.1
access-list 103 permit ip 10.0.0.0 0.7.255.255 host 192.168.2.1
access-list 103 permit ip 10.240.0.0 0.7.255.255 host 192.168.2.1
access-list 103 permit ip 192.168.2.0 0.0.0.255 host 192.168.2.1
access-list 103 deny ip any any
dialer watch-list 1 ip 62.206.215.4 255.255.255.255
dialer watch-list 1 ip 193.159.174.132 255.255.255.255
dialer watch-list 1 delay route-check initial 300
dialer-list 1 protocol ip permit
dialer-list 2 protocol ip list 102
snmp-server community XXXXXX RO
snmp-server enable traps tty
no cdp run
!
control-plane
!
bridge 1 protocol ieee
bridge 1 route ip

[Ghostolani]

die fast komplette muss erst freigeschaltet werden ...

[...]
interface BRI0
description ISDN Port
no ip address
encapsulation ppp
dialer pool-member 2
dialer pool-member 3
isdn switch-type basic-net3
isdn point-to-point-setup

[...]

interface Dialer3
description Remote Management
bandwidth 64
ip address 192.168.2.1 255.255.255.0
ip access-group 103 in
ip access-group 103 out
encapsulation ppp
load-interval 30
dialer pool 3
dialer remote-name IT1_Mgmt
dialer idle-timeout 360
dialer caller 62XXX
dialer caller 35
dialer caller 35
dialer hold-queue 16
dialer load-threshold 64 either
dialer max-call 1
dialer-group 3
no fair-queue
no cdp enable
ppp authentication chap

[Wordo]

Mach mal pap und trag auf beiden Routern den Username ein.

Fuer debug bei ISDN generell:

deb isdn sta
deb ppp neg
deb ppp auth
ter mon

[Lian]

Hallo,

am besten solche Configs/Logfiles als TXT File hier anhängen.

[Ghostolani]

Es gibt keinen 2. Router. Ich möchte mich von einem Laptop über eine ISDN Karte einwählen ... aber ich teste das mal mit dem pap.

[Ghostolani]

debugg mit den Einstellungen siehe oben. Das ergänzen von PAP hat keinen Erfolg gebracht.