877 su adsl2 infostrada, riceve IP ma non passa traffico

Configurazioni per connettività ADSL, ISDN e switch per privati e piccole network

Moderatore: Federico.Lagni

Rispondi
cariafraweb
n00b
Messaggi: 3
Iscritto il: ven 08 feb , 2008 11:12 am
Contatta:

Ciao a tutti,
ho un'adsl 2+ a 20 MB/1MB con Infostrada su ULL
Premetto che ho gia' testato la linea con un altro router e funziona tutto

Ho configurato il Cisco 877 usando SDM Express
Sia IOS che il firmware che SDM sono tutti all'ultima versione (il rivenditore Cisco mi ha aggiornato tutto prima di darmi l'apparato)

Il problema e' che la portante viene rilevata correttamente (19999 down e 996 up) con un'ottima attenuazione (14 dB, ossia 1 km dalla centrale telecom) e l'interfaccia Dialer0 riceve l'IP dalla rete

Tuttavia, ne' dal router ne' dagli host della rete e' possibile pingare o navigare (ho provato sia nomi dns che ovviamente anche IP diretti)

Qualche tempo fa avevo avuto lo stesso problema e si trattava di settare MTU e MSS, attualmente SDM li ha configurati di suo a 1452, quindi non dovrebbero esserci problemi a riguardo

Vi posto di seguito la configurazione e alcuni show (versione, ip brief e adsl) spero che qualcuno di voi possa aiutarmi

Piccola nota banale: FastEthernet0 era in quel momento down perche' ho staccato il cavo per usare l'altra connessione, quando e' up non ci sono problemi (DHCP va, pingo il router, SDM si apre,...)

Grazie tantissimo
Ciao

Codice: Seleziona tutto

Using 3166 out of 131072 bytes
!
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname cisco877-sec-k9
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
logging buffered 51200
logging console critical
enable secret 5 (cancellata)
enable password 7 (cancellata)
!
no aaa new-model
!
crypto pki trustpoint TP-self-signed-1872815991
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1872815991
 revocation-check none
 rsakeypair TP-self-signed-1872815991
!
!
crypto pki certificate chain TP-self-signed-1872815991
 certificate self-signed 01 nvram:IOS-Self-Sig#1.cer
dot11 syslog
no ip source-route
no ip routing
!
!
ip dhcp excluded-address 192.168.28.1
ip dhcp excluded-address 192.168.28.251 192.168.28.254
!
ip dhcp pool sdm-pool1
   network 192.168.28.0 255.255.255.0
   domain-name duomo
   dns-server 193.70.152.15 193.70.152.25 
   default-router 192.168.28.1 
!
!         
no ip cef 
no ip bootp server
ip domain name duomo
ip name-server 193.70.152.15
ip name-server 193.70.152.25
no ipv6 cef
!         
multilink bundle-name authenticated
!         
!         
!         
username admin privilege 15 secret 5 (cancellata)
!         
!         
!         
archive   
 log config
  hidekeys
!         
!         
ip tcp synwait-time 10
!         
!         
!         
interface ATM0
 no ip address
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 no ip route-cache
 no atm ilmi-keepalive
!         
interface ATM0.1 point-to-point
 description $ES_WAN$
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 no ip route-cache
 pvc 8/35 
  pppoe-client dial-pool-number 1
 !        
!         
interface FastEthernet0
!         
interface FastEthernet1
 shutdown 
!         
interface FastEthernet2
 shutdown 
!         
interface FastEthernet3
 shutdown 
!         
interface Vlan1
 ip address 192.168.28.1 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip nat inside
 ip virtual-reassembly
 no ip route-cache
 ip tcp adjust-mss 1412
!         
interface Dialer0
 ip address negotiated
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip mtu 1452
 ip nat outside
 ip virtual-reassembly
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 ppp authentication chap pap callin
 ppp chap hostname (cancellata)
 ppp chap password 7 (cancellata)
 ppp pap sent-username (cancellata) password (cancellata) 
!         
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer0
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
!         
!         
ip nat inside source list 100 interface Dialer0 overload
!         
logging trap debugging
access-list 100 remark SDM_ACL Category=2
access-list 100 permit ip 192.168.28.0 0.0.0.255 any
dialer-list 1 protocol ip permit
no cdp run
          
!         
!         
!         
!         
!         
control-plane
!         
!         
line con 0
 no modem enable
line aux 0
line vty 0 4
 privilege level 15
 password 7 (cancellata)
 login local
 transport input telnet ssh
!         
scheduler max-task-time 5000
scheduler allocate 4000 1000
scheduler interval 500
end       

Codice: Seleziona tutto

cisco877-sec-k9#show ver
Cisco IOS Software, C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(22)T, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2008 by Cisco Systems, Inc.
Compiled Fri 10-Oct-08 12:57 by prod_rel_team

ROM: System Bootstrap, Version 12.3(8r)YI4, RELEASE SOFTWARE

cisco877-sec-k9 uptime is 30 minutes
System returned to ROM by reload
System image file is "flash:c870-advipservicesk9-mz.124-22.T.bin"
Last reload reason: Reload Command



This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
          
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
          
If you require further assistance please contact us by sending email to
[email protected].
          
Cisco 877 (MPC8272) processor (revision 0x200) with 118784K/12288K bytes of memory.
Processor board ID FHK1110149G
MPC8272 CPU Rev: Part Number 0xC, Mask Number 0x10
4 FastEthernet interfaces
1 ATM interface
128K bytes of non-volatile configuration memory.
28672K bytes of processor board System flash (Intel Strataflash)
          
Configuration register is 0x2102

Codice: Seleziona tutto

cisco877-sec-k9#show ip int brief
Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0              unassigned      YES unset  down                  down    
FastEthernet1              unassigned      YES unset  administratively down down    
FastEthernet2              unassigned      YES unset  administratively down down    
FastEthernet3              unassigned      YES unset  administratively down down    
ATM0                       unassigned      YES NVRAM  up                    up      
ATM0.1                     unassigned      YES unset  up                    up      
SSLVPN-VIF0                unassigned      NO  unset  up                    up      
Vlan1                      192.168.28.1    YES NVRAM  up                    down    
NVI0                       unassigned      YES unset  administratively down down    
Dialer0                    151.59.196.223  YES IPCP   up                    up      
Virtual-Access1            unassigned      YES unset  up                    up  

Codice: Seleziona tutto

cisco877-sec-k9#show ip int Dialer0
Dialer0 is up, line protocol is up
  Internet address is 151.59.196.223/32
  Broadcast address is 255.255.255.255
  Address determined by IPCP
  MTU is 1452 bytes
  Helper address is not set
  Directed broadcast forwarding is disabled
  Outgoing access list is not set
  Inbound  access list is not set
  Proxy ARP is disabled
  Local Proxy ARP is disabled
  Security level is default
  Split horizon is enabled
  ICMP redirects are never sent
  ICMP unreachables are never sent
  ICMP mask replies are never sent
  IP fast switching is disabled
  IP fast switching on the same interface is enabled
  IP Flow switching is disabled
  IP CEF switching is disabled
  IP Null turbo vector
  IP Null turbo vector
  IP multicast fast switching is enabled
  IP multicast distributed fast switching is disabled
  IP route-cache flags are Fast
  Router Discovery is disabled
  IP output packet accounting is disabled
  IP access violation accounting is disabled
  TCP/IP header compression is disabled
  RTP/IP header compression is disabled
  Policy routing is disabled
  Network address translation is enabled, interface in domain outside
  BGP Policy Mapping is disabled
  Input features: Stateful Inspection, Dialer i/f override, Virtual Fragment Reassembly, NAT Outside, MCI Check
  Output features: CCE Output Classification, Post-routing NAT Outside, Stateful Inspection, Dialer idle reset
  WCCP Redirect outbound is disabled
  WCCP Redirect inbound is disabled
  WCCP Redirect exclude is disabled

Codice: Seleziona tutto

cisco877-sec-k9#show dsl int ATM0
ATM0
Alcatel 20190 chipset information
                ATU-R (DS)                      ATU-C (US)
Modem Status:    Showtime (DMTDSL_SHOWTIME)
DSL Mode:        ITU G.992.5 (ADSL2+) Annex A
ITU STD NUM:     0x03                            0x2 
Chip Vendor ID:  'STMI'                          'BDCM'
Chip Vendor Specific:  0x0000                    0x6199
Chip Vendor Country:   0x0F                      0xB5
Modem Vendor ID: 'CSCO'                          '    '
Modem Vendor Specific: 0x0000                    0x0000
Modem Vendor Country:  0xB5                      0x00
Serial Number Near:    FHK1110149G
Serial Number Far:     
Modem VerChip ID:        C196 (0)
DFE BOM:         DFE3.0 Annex A (1)
Capacity Used:   88%                             100%
Noise Margin:    10.5 dB                         11.0 dB
Output Power:    15.0 dBm                        12.0 dBm
Attenuation:     14.0 dB                          5.0 dB
FEC ES Errors:    0                               0
ES Errors:        1                              37
SES Errors:       1                               5
LOSES Errors:     1                               2
UES Errors:       0                              1022182
Defect Status:   None                            None                        
Last Fail Code:  None
Watchdog Counter: 0xCB
Watchdog Resets: 0
Selftest Result: 0x00
Subfunction:     0x00 
Interrupts:      4139 (0 spurious)
PHY Access Err:  0
Activations:     1
LED Status:      ON
LED On Time:     100
LED Off Time:    100
Init FW:         init_AMR-3.0.014_no_bist.bin
Operation FW:    AMR-3.0.014.bin
FW Source:       embedded
FW Version:      3.0.14
          
                 DS Channel1      DS Channel0   US Channel1       US Channel0
Speed (kbps):             0            19999             0               996
Cells:                    0             1098             0           4649150
Reed-Solomon EC:          0                0             0                 0
CRC Errors:               0                4             0                77
Header Errors:            0                3             0               354
Total BER:                0E-0           1058E-11
Leakage Average BER:      0E-0           1058E-11
Interleave Delay:         0               36             0                63
                        ATU-R (DS)      ATU-C (US)
Bitswap:               enabled            enabled
Bitswap success:          0                   0
Bitswap failure:          0                   0
          
LOM Monitoring : Disabled
          
          
DMT Bits Per Bin

(rimosso)

DSL: Training log buffer capability is not enabled
cisco877-sec-k9#
keycien
Cisco fan
Messaggi: 45
Iscritto il: ven 22 feb , 2008 12:50 am

non sono un espertone ma avendo anch'io infostrada ull 20mega ci sono già passato...quindi ti consiglio di utilizzare solo chap per autenticarti.

famme sapè
Frisco
Cisco power user
Messaggi: 87
Iscritto il: gio 29 gen , 2009 3:42 pm

cariafraweb ha scritto:Ciao a tutti,
ho un'adsl 2+ a 20 MB/1MB con Infostrada su ULL
Premetto che ho gia' testato la linea con un altro router e funziona tutto

Ho configurato il Cisco 877 usando SDM Express
Sia IOS che il firmware che SDM sono tutti all'ultima versione (il rivenditore Cisco mi ha aggiornato tutto prima di darmi l'apparato)

Il problema e' che la portante viene rilevata correttamente (19999 down e 996 up) con un'ottima attenuazione (14 dB, ossia 1 km dalla centrale telecom) e l'interfaccia Dialer0 riceve l'IP dalla rete

Tuttavia, ne' dal router ne' dagli host della rete e' possibile pingare o navigare (ho provato sia nomi dns che ovviamente anche IP diretti)

Qualche tempo fa avevo avuto lo stesso problema e si trattava di settare MTU e MSS, attualmente SDM li ha configurati di suo a 1452, quindi non dovrebbero esserci problemi a riguardo

Vi posto di seguito la configurazione e alcuni show (versione, ip brief e adsl) spero che qualcuno di voi possa aiutarmi

Piccola nota banale: FastEthernet0 era in quel momento down perche' ho staccato il cavo per usare l'altra connessione, quando e' up non ci sono problemi (DHCP va, pingo il router, SDM si apre,...)

Grazie tantissimo
Ciao

Codice: Seleziona tutto

Using 3166 out of 131072 bytes
!
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname cisco877-sec-k9
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
logging buffered 51200
logging console critical
enable secret 5 (cancellata)
enable password 7 (cancellata)
!
no aaa new-model
!
crypto pki trustpoint TP-self-signed-1872815991
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1872815991
 revocation-check none
 rsakeypair TP-self-signed-1872815991
!
!
crypto pki certificate chain TP-self-signed-1872815991
 certificate self-signed 01 nvram:IOS-Self-Sig#1.cer
dot11 syslog
no ip source-route
no ip routing
!
!
ip dhcp excluded-address 192.168.28.1
ip dhcp excluded-address 192.168.28.251 192.168.28.254
!
ip dhcp pool sdm-pool1
   network 192.168.28.0 255.255.255.0
   domain-name duomo
   dns-server 193.70.152.15 193.70.152.25 
   default-router 192.168.28.1 
!
!         
no ip cef 
no ip bootp server
ip domain name duomo
ip name-server 193.70.152.15
ip name-server 193.70.152.25
no ipv6 cef
!         
multilink bundle-name authenticated
!         
!         
!         
username admin privilege 15 secret 5 (cancellata)
!         
!         
!         
archive   
 log config
  hidekeys
!         
!         
ip tcp synwait-time 10
!         
!         
!         
interface ATM0
 no ip address
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 no ip route-cache
 no atm ilmi-keepalive
!         
interface ATM0.1 point-to-point
 description $ES_WAN$
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 no ip route-cache
 pvc 8/35 
  pppoe-client dial-pool-number 1
 !        
!         
interface FastEthernet0
!         
interface FastEthernet1
 shutdown 
!         
interface FastEthernet2
 shutdown 
!         
interface FastEthernet3
 shutdown 
!         
interface Vlan1
 ip address 192.168.28.1 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip nat inside
 ip virtual-reassembly
 no ip route-cache
 ip tcp adjust-mss 1412
!         
interface Dialer0
 ip address negotiated
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip mtu 1452
 ip nat outside
 ip virtual-reassembly
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 ppp authentication chap pap callin
 ppp chap hostname (cancellata)
 ppp chap password 7 (cancellata)
 ppp pap sent-username (cancellata) password (cancellata) 
!         
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer0
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
!         
!         
ip nat inside source list 100 interface Dialer0 overload
!         
logging trap debugging
access-list 100 remark SDM_ACL Category=2
access-list 100 permit ip 192.168.28.0 0.0.0.255 any
dialer-list 1 protocol ip permit
no cdp run
          
!         
!         
!         
!         
!         
control-plane
!         
!         
line con 0
 no modem enable
line aux 0
line vty 0 4
 privilege level 15
 password 7 (cancellata)
 login local
 transport input telnet ssh
!         
scheduler max-task-time 5000
scheduler allocate 4000 1000
scheduler interval 500
end       

Codice: Seleziona tutto

cisco877-sec-k9#show ver
Cisco IOS Software, C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(22)T, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2008 by Cisco Systems, Inc.
Compiled Fri 10-Oct-08 12:57 by prod_rel_team

ROM: System Bootstrap, Version 12.3(8r)YI4, RELEASE SOFTWARE

cisco877-sec-k9 uptime is 30 minutes
System returned to ROM by reload
System image file is "flash:c870-advipservicesk9-mz.124-22.T.bin"
Last reload reason: Reload Command



This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
          
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
          
If you require further assistance please contact us by sending email to
[email protected].
          
Cisco 877 (MPC8272) processor (revision 0x200) with 118784K/12288K bytes of memory.
Processor board ID FHK1110149G
MPC8272 CPU Rev: Part Number 0xC, Mask Number 0x10
4 FastEthernet interfaces
1 ATM interface
128K bytes of non-volatile configuration memory.
28672K bytes of processor board System flash (Intel Strataflash)
          
Configuration register is 0x2102

Codice: Seleziona tutto

cisco877-sec-k9#show ip int brief
Interface                  IP-Address      OK? Method Status                Protocol
FastEthernet0              unassigned      YES unset  down                  down    
FastEthernet1              unassigned      YES unset  administratively down down    
FastEthernet2              unassigned      YES unset  administratively down down    
FastEthernet3              unassigned      YES unset  administratively down down    
ATM0                       unassigned      YES NVRAM  up                    up      
ATM0.1                     unassigned      YES unset  up                    up      
SSLVPN-VIF0                unassigned      NO  unset  up                    up      
Vlan1                      192.168.28.1    YES NVRAM  up                    down    
NVI0                       unassigned      YES unset  administratively down down    
Dialer0                    151.59.196.223  YES IPCP   up                    up      
Virtual-Access1            unassigned      YES unset  up                    up  

Codice: Seleziona tutto

cisco877-sec-k9#show ip int Dialer0
Dialer0 is up, line protocol is up
  Internet address is 151.59.196.223/32
  Broadcast address is 255.255.255.255
  Address determined by IPCP
  MTU is 1452 bytes
  Helper address is not set
  Directed broadcast forwarding is disabled
  Outgoing access list is not set
  Inbound  access list is not set
  Proxy ARP is disabled
  Local Proxy ARP is disabled
  Security level is default
  Split horizon is enabled
  ICMP redirects are never sent
  ICMP unreachables are never sent
  ICMP mask replies are never sent
  IP fast switching is disabled
  IP fast switching on the same interface is enabled
  IP Flow switching is disabled
  IP CEF switching is disabled
  IP Null turbo vector
  IP Null turbo vector
  IP multicast fast switching is enabled
  IP multicast distributed fast switching is disabled
  IP route-cache flags are Fast
  Router Discovery is disabled
  IP output packet accounting is disabled
  IP access violation accounting is disabled
  TCP/IP header compression is disabled
  RTP/IP header compression is disabled
  Policy routing is disabled
  Network address translation is enabled, interface in domain outside
  BGP Policy Mapping is disabled
  Input features: Stateful Inspection, Dialer i/f override, Virtual Fragment Reassembly, NAT Outside, MCI Check
  Output features: CCE Output Classification, Post-routing NAT Outside, Stateful Inspection, Dialer idle reset
  WCCP Redirect outbound is disabled
  WCCP Redirect inbound is disabled
  WCCP Redirect exclude is disabled

Codice: Seleziona tutto

cisco877-sec-k9#show dsl int ATM0
ATM0
Alcatel 20190 chipset information
                ATU-R (DS)                      ATU-C (US)
Modem Status:    Showtime (DMTDSL_SHOWTIME)
DSL Mode:        ITU G.992.5 (ADSL2+) Annex A
ITU STD NUM:     0x03                            0x2 
Chip Vendor ID:  'STMI'                          'BDCM'
Chip Vendor Specific:  0x0000                    0x6199
Chip Vendor Country:   0x0F                      0xB5
Modem Vendor ID: 'CSCO'                          '    '
Modem Vendor Specific: 0x0000                    0x0000
Modem Vendor Country:  0xB5                      0x00
Serial Number Near:    FHK1110149G
Serial Number Far:     
Modem VerChip ID:        C196 (0)
DFE BOM:         DFE3.0 Annex A (1)
Capacity Used:   88%                             100%
Noise Margin:    10.5 dB                         11.0 dB
Output Power:    15.0 dBm                        12.0 dBm
Attenuation:     14.0 dB                          5.0 dB
FEC ES Errors:    0                               0
ES Errors:        1                              37
SES Errors:       1                               5
LOSES Errors:     1                               2
UES Errors:       0                              1022182
Defect Status:   None                            None                        
Last Fail Code:  None
Watchdog Counter: 0xCB
Watchdog Resets: 0
Selftest Result: 0x00
Subfunction:     0x00 
Interrupts:      4139 (0 spurious)
PHY Access Err:  0
Activations:     1
LED Status:      ON
LED On Time:     100
LED Off Time:    100
Init FW:         init_AMR-3.0.014_no_bist.bin
Operation FW:    AMR-3.0.014.bin
FW Source:       embedded
FW Version:      3.0.14
          
                 DS Channel1      DS Channel0   US Channel1       US Channel0
Speed (kbps):             0            19999             0               996
Cells:                    0             1098             0           4649150
Reed-Solomon EC:          0                0             0                 0
CRC Errors:               0                4             0                77
Header Errors:            0                3             0               354
Total BER:                0E-0           1058E-11
Leakage Average BER:      0E-0           1058E-11
Interleave Delay:         0               36             0                63
                        ATU-R (DS)      ATU-C (US)
Bitswap:               enabled            enabled
Bitswap success:          0                   0
Bitswap failure:          0                   0
          
LOM Monitoring : Disabled
          
          
DMT Bits Per Bin

(rimosso)

DSL: Training log buffer capability is not enabled
cisco877-sec-k9#
Puoi provare ad aggiungere:
access-list 1 permit 192.0.0.0 0.255.255.255

Dovrebbe andare.

Ciao
lorbellu
Network Emperor
Messaggi: 313
Iscritto il: gio 25 ott , 2007 6:14 pm

Ciao,

Puoi verificare se l'ACL del NAT si incrementa? Lo vedi con il comando sh access-lists. Da quello che vedo la linea funziona perfettamente ed il fatto che ottieni l'IP dal provider vuol dire che ti autentichi correttamente. Il problema quindi forse sta nel fatto che il router non sta effettuando correttamente il nat.
Prova ad impostare un debug ip nat translation e vedi se butta fuori qualcosa.

Saluti
Lorbellu
Rispondi