C837 IOS 12.2 + alice adsl

[Haba]

So che l'argomento è stato trattato più volte, ho cercato bene nel forum ma nessuna configurazione ha fatto funzionare il mio router. Premetto che sono un novizio in fatto di IOS ma in un giorno ho imparato parecchie cose.

Ho recuperato un Cisco 837 con IOS 12.2(8r)YN
Aveva una password sconosciuta che ho provveduto a resettare seguendo questi:
http://www.ciscoforums.it/ITBlog/index. ... l#extended
http://www.cisco.com/en/US/products/sw/ ... 17a1.shtml

Ora sto cercando di collegarmi ad internet con una adsl alice.

Il mio client di prova ha:

Codice: Seleziona tutto

IP: 192.168.254.1 [255.255.255.0]
Gateway: 192.168.254.254

DNS1: 80.21.70.171
DNS2: 151.99.125.1

questo è il file di configurazione per il router che ho usato:

Codice: Seleziona tutto

Current configuration : 1027 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
!
ip subnet-zero
!
ip audit notify log
ip audit po max-events 100
!
!
!
!
interface Ethernet0
 ip address 192.168.254.254 255.255.255.0
 ip nat inside
 no cdp enable
 hold-queue 100 out
!
interface ATM0
 no ip address
 no atm ilmi-keepalive
 pvc 8/35
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
 dsl operating-mode auto
!
interface Dialer0
 ip address negotiated
 ip nat outside
 encapsulation ppp
 no ip route-cache
 no ip mroute-cache
 dialer pool 1
 dialer-group 1
 no cdp enable
 ppp pap sent-username myuser password 0 mypass
!
ip nat inside source list 1 interface Dialer0 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
no ip http server
!
!
access-list 1 permit 192.168.254.0 0.0.0.255
dialer-list 1 protocol ip permit
no cdp run
!
line con 0
 no modem enable
 stopbits 1
line aux 0
line vty 0 4
!
scheduler max-task-time 5000
end

Ma non c'è verso di farlo andare...
C'è qualche test che posso fare per vedere a che livello sorge il problema?

Sul client ho disabilitato tutti il personal firewall.
Client e Router si pingano a vicenda senza problemi.

Grazie

[TheIrish]

Potresti postare uno show int per favore?

[Haba]

credo che il problema stia nel fatto che Virtual-Access3 abbia il protocol down:

Codice: Seleziona tutto

Router#show ip int brief
Interface                  IP-Address      OK? Method Status                Protocol
Ethernet0                  192.168.254.254 YES manual up                    up
ATM0                       unassigned      YES manual up                    up
Virtual-Access1            unassigned      YES unset  up                    up
Dialer0                    unassigned      YES manual up                    up
Virtual-Access2            unassigned      YES unset  up                    up
Virtual-Access3            unassigned      YES unset  up                    down

Codice: Seleziona tutto

Router#show int
ATM0 is up, line protocol is up
  Hardware is PQUICC_SAR (with Alcatel ADSL Module)
  MTU 1500 bytes, sub MTU 1500, BW 800 Kbit, DLY 80 usec,
     reliability 156/255, txload 1/255, rxload 1/255
  Encapsulation ATM, loopback not set
  Encapsulation(s): AAL5  AAL2, PVC mode
  10 maximum active VCs, 1024 VCs per VP, 1 current VCCs
  VC Auto Creation Disabled.
  VC idle disconnect time: 300 seconds
  Last input never, output 00:00:27, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: None
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     0 packets input, 0 bytes, 0 no buffer
     Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     100 packets output, 1200 bytes, 0 underruns
     0 output errors, 0 collisions, 3 interface resets
     0 output buffer failures, 0 output buffers swapped out
Dialer0 is up, line protocol is up (spoofing)
  Hardware is Unknown
  Internet address will be negotiated using DHCP
  MTU 1500 bytes, BW 56 Kbit, DLY 20000 usec,
     reliability 255/255, txload 1/255, rxload 1/255, loopback not set
  DTR is pulsed for 1 seconds on reset
  Interface is bound to Vi3
  Last input never, output never, output hang never
  Last clearing of "show interface" counters 00:12:34
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: weighted fair
  Output queue: 0/1000/64/0 (size/max total/threshold/drops)
     Conversations  0/0/16 (active/max active/max total)
     Reserved Conversations 0/0 (allocated/max allocated)
     Available Bandwidth 42 kilobits/sec
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     0 packets input, 0 bytes
     0 packets output, 0 bytes
Bound to:
Virtual-Access3 is up, line protocol is down
  Hardware is Virtual Access interface
  MTU 1500 bytes, BW 56 Kbit, DLY 100000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation PPP, LCP Listen
  PPPoATM vaccess, cloned from Dialer0
  Bound to ATM0 VCD: 1, VPI: 8, VCI: 35, loopback not set
  DTR is pulsed for 5 seconds on reset
  Interface is bound to Di0 (Encapsulation PPP)
  Last input never, output never, output hang never
  Last clearing of "show interface" counters 00:08:18
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue :0/40 (size/max)
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     0 packets input, 0 bytes, 0 no buffer
     Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     100 packets output, 1200 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 output buffer failures, 0 output buffers swapped out
     0 carrier transitions
Ethernet0 is up, line protocol is up
  Hardware is PQUICC Ethernet, address is 000c.8520.dd1b (bia 000c.8520.dd1b)
  Internet address is 192.168.254.254/24
  MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full-duplex, 10Mb/s
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:00, output 00:00:00, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue :0/100 (size/max)
  5 minute input rate 1000 bits/sec, 2 packets/sec
  5 minute output rate 1000 bits/sec, 1 packets/sec
     2155 packets input, 135748 bytes, 0 no buffer
     Received 38 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 input packets with dribble condition detected
     3147 packets output, 209971 bytes, 0 underruns
     0 output errors, 0 collisions, 1 interface resets
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier
     0 output buffer failures, 0 output buffers swapped out
Virtual-Access1 is up, line protocol is up
  Hardware is Virtual Access interface
  MTU 1492 bytes, BW 100000 Kbit, DLY 100000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Base PPPoE vaccess, loopback not set
  DTR is pulsed for 5 seconds on reset
  Last input never, output never, output hang never
  Last clearing of "show interface" counters 00:15:57
  Input queue: 0/4096/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue :0/40 (size/max)
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     0 packets input, 0 bytes, 0 no buffer
     Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     0 packets output, 0 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 output buffer failures, 0 output buffers swapped out
     0 carrier transitions
Virtual-Access2 is up, line protocol is up
  Hardware is Virtual Access interface
  MTU 1500 bytes, BW 100000 Kbit, DLY 100000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Base PPPoATM vaccess, loopback not set
  DTR is pulsed for 5 seconds on reset
  Last input never, output never, output hang never
  Last clearing of "show interface" counters 00:12:18
  Input queue: 0/4096/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue :0/40 (size/max)
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     0 packets input, 0 bytes, 0 no buffer
     Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     0 packets output, 0 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 output buffer failures, 0 output buffers swapped out
     0 carrier transitions
Virtual-Access3 is up, line protocol is down
  Hardware is Virtual Access interface
  MTU 1500 bytes, BW 56 Kbit, DLY 100000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation PPP, LCP Listen
  PPPoATM vaccess, cloned from Dialer0
  Bound to ATM0 VCD: 1, VPI: 8, VCI: 35, loopback not set
  DTR is pulsed for 5 seconds on reset
  Interface is bound to Di0 (Encapsulation PPP)
  Last input never, output never, output hang never
  Last clearing of "show interface" counters 00:08:20
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue :0/40 (size/max)
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     0 packets input, 0 bytes, 0 no buffer
     Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     100 packets output, 1200 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 output buffer failures, 0 output buffers swapped out
     0 carrier transitions

Riposto anche la configurazione:

Codice: Seleziona tutto

Current configuration : 1205 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
enable secret 5 $1$f33t$7X0bqjjCvFo7jrVYj1W7W/
!
ip subnet-zero
!
ip audit notify log
ip audit po max-events 100
!
!
!
!
interface Ethernet0
 ip address 192.168.254.254 255.255.255.0
 ip nat inside
 no cdp enable
 hold-queue 100 out
!
interface ATM0
 no ip address
 no atm ilmi-keepalive
 pvc 8/35
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
 dsl operating-mode auto
 dsl power-cutback 0
!
interface Dialer0
 ip address negotiated
 ip nat outside
 encapsulation ppp
 no ip route-cache
 no ip mroute-cache
 dialer pool 1
 dialer-group 1
 no cdp enable
 ppp chap hostname username
 ppp chap password 0 passw
 ppp pap sent-username username password 0 passw
!
ip nat inside source list 1 interface Dialer0 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
no ip http server
!
!
access-list 1 permit 192.168.254.0 0.0.0.255
dialer-list 1 protocol ip permit
no cdp run
!
line con 0
 no modem enable
 stopbits 1
line aux 0
line vty 0 4
 password psw
 login
 transport preferred telnet
!
scheduler max-task-time 5000
end

[Haba]

up

[Haba]

posto il debug ppp:


debug ppp negotiation
debug ppp authentication

Codice: Seleziona tutto

*Mar  1 00:07:04.451: %LINK-3-UPDOWN: Interface ATM0, changed state to up
*Mar  1 00:07:05.451: %LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0, changed state to up
*Mar  1 00:07:09.351: %LINK-3-UPDOWN: Interface Virtual-Access3, changed state to up
*Mar  1 00:07:09.351: %DIALER-6-BIND: Interface Vi3 bound to profile Di1
*Mar  1 00:07:09.351: Vi3 PPP: Treating connection as a callout
*Mar  1 00:07:09.351: Vi3 PPP: Phase is ESTABLISHING, Active Open
*Mar  1 00:07:09.351: Vi3 PPP: Authorization required
*Mar  1 00:07:09.351: Vi3 PPP: No remote authentication for call-out
*Mar  1 00:07:09.351: Vi3 LCP: O CONFREQ [Closed] id 71 len 10
*Mar  1 00:07:09.359: Vi3 LCP:    MagicNumber 0x0C8BAEBC (0x05060C8BAEBC)
*Mar  1 00:07:11.339: Vi3 LCP: TIMEout: State REQsent
*Mar  1 00:07:11.339: Vi3 LCP: O CONFREQ [REQsent] id 72 len 10
*Mar  1 00:07:11.339: Vi3 LCP:    MagicNumber 0x0C8BAEBC (0x05060C8BAEBC)
*Mar  1 00:07:13.355: Vi3 LCP: TIMEout: State REQsent
*Mar  1 00:07:13.355: Vi3 LCP: O CONFREQ [REQsent] id 73 len 10
*Mar  1 00:07:13.355: Vi3 LCP:    MagicNumber 0x0C8BAEBC (0x05060C8BAEBC)
*Mar  1 00:07:15.371: Vi3 LCP: TIMEout: State REQsent
*Mar  1 00:07:15.371: Vi3 LCP: O CONFREQ [REQsent] id 74 len 10
*Mar  1 00:07:15.371: Vi3 LCP:    MagicNumber 0x0C8BAEBC (0x05060C8BAEBC)
*Mar  1 00:07:17.387: Vi3 LCP: TIMEout: State REQsent
*Mar  1 00:07:17.387: Vi3 LCP: O CONFREQ [REQsent] id 75 len 10
*Mar  1 00:07:17.387: Vi3 LCP:    MagicNumber 0x0C8BAEBC (0x05060C8BAEBC)
*Mar  1 00:07:19.403: Vi3 LCP: TIMEout: State REQsent
*Mar  1 00:07:19.403: Vi3 LCP: O CONFREQ [REQsent] id 76 len 10
*Mar  1 00:07:19.403: Vi3 LCP:    MagicNumber 0x0C8BAEBC (0x05060C8BAEBC)
*Mar  1 00:07:21.419: Vi3 LCP: TIMEout: State REQsent
*Mar  1 00:07:21.419: Vi3 LCP: O CONFREQ [REQsent] id 77 len 10
*Mar  1 00:07:21.419: Vi3 LCP:    MagicNumber 0x0C8BAEBC (0x05060C8BAEBC)
*Mar  1 00:07:23.435: Vi3 LCP: TIMEout: State REQsent
*Mar  1 00:07:23.435: Vi3 LCP: O CONFREQ [REQsent] id 78 len 10
*Mar  1 00:07:23.435: Vi3 LCP:    MagicNumber 0x0C8BAEBC (0x05060C8BAEBC)
*Mar  1 00:07:25.451: Vi3 LCP: TIMEout: State REQsent
*Mar  1 00:07:25.451: Vi3 LCP: O CONFREQ [REQsent] id 79 len 10
*Mar  1 00:07:25.451: Vi3 LCP:    MagicNumber 0x0C8BAEBC (0x05060C8BAEBC)
*Mar  1 00:07:27.467: Vi3 LCP: TIMEout: State REQsent
*Mar  1 00:07:27.467: Vi3 LCP: O CONFREQ [REQsent] id 80 len 10
*Mar  1 00:07:27.467: Vi3 LCP:    MagicNumber 0x0C8BAEBC (0x05060C8BAEBC)
*Mar  1 00:07:29.483: Vi3 LCP: TIMEout: State REQsent
*Mar  1 00:07:29.483: Vi3 LCP: State is Listen

sembra che non ci sia risposta al CONFREQ.... eppure con un altro modem/router riuscivo a farlo funzionare in PPPoA...
Non capisco quale possa essere il problema...

[Haba]

Ma non c'è proprio nessuno che abbia di idea di cosa non vada?

Non so se può servire. L'adsl è una comune alice flat (attualmente 1.2M che dovrebbe diventare chissà quando una 4M) con ip dinamico su un abbonamento telecom business.

Precedentemente usavo un modem Ericsson HM220dp in PPPoE. Tale modem ha la possibilità di funzionare come (limitatissimo) router. Le modalità di connessione disponibili erano (PPPoA, routed rfc1483, bridged rfc1483). Facendo fare il PC da client PPPoE usavo il modem come bridged rfc1483.

Usandolo come router invece selezionavo PPPoA come protocollo, LLC come encapsulation e CHAP come autenticazione. Tutto funzionava.

Ora con il Cisco 837 riesco a collegarmi in PPPoE ma in PPPoA non c'è verso (vedi post precedenti). Questo router è per me un'occasione per imparare... e vorrei riuscire a farlo funzionare anche in questa modalità.

Grato a chiunque volesse illuminarmi.

[TheIrish]

Sto cercando di capire la questione. Sebbene i log suggeriscano un problema di autenticazione, molto probabilmente non si tratta di quello.
Leggo giusto adesso che a quanto pare l'incapsulazione è LLC e non VCMUX. Prova a fare questo cambiamento.

[Haba]

finalmente!
pensa che ci avevo già provato con un LLC/SNAP ma non ci ero comunque riuscito, probabilmente sbagliavo qualcos'altro.

Ora sono riuscito a collegarmi con una encapsulation aal5snap e una autenticazione PAP. Con Chap non funziona.

Per dovere di cronaca posto la configurazione

Codice: Seleziona tutto

!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
enable secret 5 $1$J2Yc$z..........
!
no ip subnet-zero
!
ip audit notify log
ip audit po max-events 100
!
!
!
!
interface Ethernet0
 ip address 192.168.254.253 255.255.255.0
 ip nat inside
 no cdp enable
 hold-queue 100 out
!
interface ATM0
 no ip address
 no atm ilmi-keepalive
 dsl operating-mode auto

!
interface atm0.1 point-to-point
 pvc 8/35
  encapsulation aal5snap 
  protocol ppp dialer
  dialer pool-member 1
!
interface Dialer1
 ip address negotiated
 ip nat outside
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 no cdp enable
 ppp pap sent-username xxxxx password 0 xxxxx
!
ip nat inside source list 1 interface Dialer1 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
no ip http server
!
!
access-list 1 permit 192.168.254.0 0.0.0.255
dialer-list 1 protocol ip permit
no cdp run
!
line con 0
 no modem enable
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 access-class 1 in
 password xxxxx
 login
 transport preferred telnet
!
scheduler max-task-time 5000
end

Quello che non riesco a capire è come mai nella totalità delle configurazioni per alice che ho trovato si usa vcmux e con me non funziona.... il motivo può essere che mi appoggio ad una linea telefonica business? Boh!


Già che ci sono volevo chiederti un paio di cose:

1) Dove posso trovare della documentazione dettagliata in cui spieghi bene e dal principio il funzionamento delle interfacce e i virtual-access? Ad esempio cosa mi rappresenta ATM0.1? ho capito che è una subinterfaccia ATM ma in alcune configurazioni è presente in altre no... esistono modi diversi di fare la stessa cosa? E come vengono creati i virtual-access? perchè me ne crea 3 per una sola connessione?

2)In molte configurazioni ho notato la riga
ppp authentication chap pap callin
non ho capito esattamente la su funzione.. mi sono documentato ma le spiegazioni che ho trovato sono coincise e decisamente criptiche. Per inciso, eliminando la riga dalla mia conf tutto funziona correttamente.

Grazie per l'attenzione e scusate le domande forse un po' ingenue.

[Haba]

Perchè in effetti funziona anche compattando tutto dentro ATM0

Codice: Seleziona tutto

interface ATM0
 no ip address
 no atm ilmi-keepalive
 pvc 8/35
  encapsulation aal5snap 
  protocol ppp dialer
  dialer pool-member 1
 !
 dsl operating-mode auto

!

in effetti ho notato che la sottointerfaccia ATM viene usata quando non è presente il Dialer...