Cisco WAN :: 870 Debug Shows Dialer 1 Success Chap But Atm0 Failed
Jan 3, 2012
I have a cisco 870 router which I'm trying to connect to my ISP all the interfaces are in a up, up state. But I'm unable to ping any IP address on the internet. When I do a debug ppp I can see that the username and password are correct with the dialer 1 interface as there is no errors and I can see success. But when I shutdown the atm0 interface and then do a no shutdown I see a message called authentication failed.How does the atm0 interface work with the dialer,Also I spoke to the ISP and they can't see any connection being made but the debug shows success. I also get a default gateway via the ISP but it is the incorrect default gateway as I can't ping the internet and the ISP confirms that the default gateway is incorrect.
I'm trying to connect to ISP with PPPoE method using Cisco 861 equip. On the other side Cisco 3845 BRAS.Session fails at authentication phase. Authentication protocol chosen by routers is ms-chap-v2. Chap supported also. [code]
Could you explain me what "interface ATM0" is ? Is it virtual interface or physical ? And in this configuration ATM stands for Asynchronous Transfer Mode or anything else?
I have been trying to configure a 837 for a while now and I'm finally nearly there. So far the tests run(SDM interface test) and pass on atm0(WAN connection to the internet) but not on ethernet0. I am guessing i need to link them somehow but since I don't know the terminology searching for how to do it is turning out to be difficult.
Here is my config:
!This is the running config of the router: 192.168.0.1 !---------------------------------------------------------------------------- !version 12.3 no service pad service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption
[code]....
I tried ip route 0.0.0.0 0.0.0.0 Dialer0 first with no luck to i added the ip route 0.0.0.0 0.0.0.0 ATM0 still nothing?
I have newly purchased Cisco 887 Router. I am trying to replace this router with the exisiting ISP provided modem I am facing an issue to bring the ATM0 port up.
Here is my router config
hostname Internet Router ! boot-start-marker boot-end-marker ! ! no logging buffered
On the ATM0 interface on a 877 do you have to configure the bandwidth or will the router automatically negotiate this ? Also is the bandwidth command in relation to the upstream or downstream bandwidth?. We currently specify bandwidth 448 which matches the upstream.
im having trauble when using chap as authentication for my two routers, i dont know whether my configuration is wrong or not.Is theres anything wrong with the configuration ??note : both routers are c2961
How the one-way hash is generated given the challenge number and shared secret password?It's just that I was reading Cisco 3 chapter 7, and it doesn't explicitly outline how the one-way hash is actually generated, it simply states that it is generated given the challenge number (randomly generated for every challenge message) and the shared secret password.
I've setup my ASA 5510 to use AAA to my Windows Server 2008 NAP. After many hours of troubleshooting I got my setup to work. The only thing I'm not satsified with at the moment is, that RADIUS is using PAP for communicating between ASA5510 and W2K8/NAP.I've tried ticking the box "Microsoft CHAPv2 Capable" box under Users/AAA => AAA Server Groups => Edit AAA Server.From EventViewer on W2K8/NAP I get Event ID 6278 and 6272., see attached filehow I change from the PAP to the CHAP protocol? PS: ASA 5510 running ASA version 8.2(4) and ASDM version 6.3(5)
I am configuring some of my devices to use CHAP when their backup ISDN interface dials out to the 7200 concentrator node. I wan the CHAP requests to hit our ACS 5.2 appliances and be authenticated via this method. I have built a rule for 'Default netowrk access' which specifies these devices only however when I bring up the ISDN call the process fails. When I look at the logs it doesn't give an error reason but it does say that it failed on one of the rules in the 'default device admin' rule set.I even went to the bother of specifying a single IP address of one of the ISDN backup devices but the result is always the same.
My ISP here at my mother's in Italy (www.teletu.it) gave me the following configuration:
1. Supported Protocol: PPPoE or PPPoA
2. VPI: 8
3. VCI: 35
4. Encapsulation: LLC (If not supported: VCMUX/NULL)
5. Modulation: Multimode
6. Authentication Protocol: PAP or CHAP
if I connect my laptop to the ADSL modem, it all works just fine and I can connect to the internet (as you can see )
HOWEVER, if I then try to configure my WRT54G v6 to use this internet connection (I NEED to be wireless here, or I won't be able to use my iPhone and iPad), there is no way apparently for me to configure the Encapsulation, Modulation, and Authentication Protocol above. I just upgraded my WRT54G's firmware, and am now running firmware Ver.1.02.8, 10/05/2009. I was hoping this would allow me to set these parameters, but I can't find a way.
I tried just configuring the WRT54G with PPPoE and the ISP's userId/password, but this doesn't seem to suffice, and I don't see any other settings I could try.
I try to use fe0 as outside, with dhcp from my ISP, and fe1-fe3 as inside on my Cisco 877. I have done this successfully before but now it just will not work. This has been a long weekend .
My ISP just forced DHCP on me (from static IP) and sent me this Xavi adsl modem. I successfully get IP addresses using DHCP from it with workstations, but not with my cisco. With current setup I get DHCP errors (DHCP: QScan: Timed out Selecting state%Unknown DHCP problem.). DHCP log is attached.
Setup is attached too, but the main parts are: ----------------------- interface FastEthernet0 switchport access vlan 2 !
I am getting some weir behaviour in my LMS 4.2 setup. I am doing and Archiveupdate job and am receiving a partial success for roughly 1400 devices. Here is some output.
Execution Result: STARTUP CM0057 PRIMARY STARTUP Config fetch SUCCESS, archival failed for xxxxxx Cause: CM0210 Unable to generate processed config Action: Verify that archive exists for device. RUNNING
[code]...
I went on and checked the dcmaservice log file.I found the following entry at the same time of this particulair job
ERROR,[Thread-72920],com.cisco.nm.xms.xdi.pkgs.SharedDcmaIOS.analyzer.IOSConfigletRules,loadRules,42,Could not locate configlet rule file : com/cisco/nm/xms/xdi/pkgs/SharedDcmaIOS/analyzer/IOSConfigletRules.ser [ date taken out ],ERROR,[Thread-72920],com.cisco.nm.rmeng.dcma.configmanager.DeviceArchiveManager,archiveNewVersionIfNeeded,1115,CM0210 Unable to generate processed config
I then searched if I had the IOSConfigletRules.set file on the box. And no it is not there. My question is this the reasson that I have som manny partial sucess archive results?
I am interested to configure my slingbox with my ASA5505. I am currently able to use the device remotely when I connect via VPN. My concern is that the VPN uses too much bandwith and I would get better quality if I would able to forward the appropirate ports through the ASA5505 and connect directly from the outside.
WLC 5508: software version 7.0.98.0 Windows 7 Client Radius Server: Fedora Core 13 / Freeradius with LDAP storage backend
I have followed the guide at URL with respective to building the LDAP and free radius server. 802.1x authorization and authenication correctly work. The session keys are returned from the radius server and the wlc send the appropriate information for the client to generate the WEP key.
However, the WLC does not override the VLAN assignment, even though I was to believe I set everything up correctly. From the packet capture, you can see that verfication of client is authorized to use the WLAN returns the needed attributes:
Using ISE 1.1.1 and Switch 3650 12.2(55)SE6. I have a client (computer) that should be authenticated with MAB and then the switch port should be asigned a DACL and VLAN 90. I do get "Authorization succeeded" but directly after it fails and I can't figure out why. ISE only shows the successful authentication under "Live Authentications".
As you can se from the log below 802.1x fails, as it should, and then MAB succeed, asigns the VLAN and then fails:
Having no success with installing a wireless G+ router F5D7231-4, without any accompanying disc etc which I got second hand, neither can I complete Installation of a new Belkin wireless G USB adapter [with disc], keeps saying there's a missing shortcut that cant be found, my PC is Acer Aspire 5551 which has no wireless facility built in, all connected to a Virgin wired modem, is there a quick fix, I'm using windows 7 if that makes any difference,.
I'm trying to join a band new CSACS-1120 to our active directory without success. The process in it self should be pretty straigh forward, but so far no luck.
I've configured the relevant info under "Users and Identity Stores > External Identity Stores > Active Directory.
Active Directory Domain Name: xxx.com Username/Password : domain administrator account
When I test connection I get a info dialog "This machine is currently connected to domain xxx.com".After which I try to save changes which gives a reply ""This System Failure occurred: {0}. Your changes have not been saved. Click OK to return to the list page."
I've noticed that in the system log "show logging system tail" that I get a exception as soon as I enter the AD configuration page and subsequently every time I perform a action on that section.
Why the AD join keeps on failing and what the debug exception I'm getting means?
I just installed a DIR-601 cascaded with a WiFi G Netgear router. The D-Link is handling DHCP. I am having varying degrees of success with the WiFi signal. One XP laptop gets anything between 80Mbps and 150Mbps (can change while sitting in the same location), while another Win7 netbook does slightly worse. My Son's MacBook Pro never seems to do any better than 72Mbps.
I dedicated the D-Link to 802.11N and only allow these 3 devices to connect to it as N devices. All other WiFi devices are G and use the Netgear G router. I am using WPA2-Personal/AES and Auto bandwidth (40 does not seem to be a choice).Didn't experience such performance fluctuations with the Netgear G router.
I try to connect two switch Catalyst 3750G without success.switch1 (192.168.2.10 vlan 2) <=> (192.168.2.11 vlan2) switch2.I use this configuration for swich1 [code]
We are trying to isolate the fault. From Aggregator a router, we are receiving MAC address of distant end ethernet interface of a SDH box and vice versa is also possible. However ther is no packet received. My question is does ping test is must to see if the path is through or just receiving MAC adress at both ends would mean that packets have to go over the path.
I purchased an E2500 wireless router. I am trying to replace a Netgear wilreless router with no success. During installation my laptop reaches about 25% and I get an error message. In short my laptop asks for an IP address with a password. Once I enter that information I receive an error message to call for assistance.
We have recently deployed several Ciso 887VAW (IOS 15.1(4)M4) to customer premises and I have come to realise counters show extremely high (not at all accurate) output rate and packets on all of them. [code]
I have an 837 ADSL router that the customer is upgrading from a 3 meg circuit to a 10 meg circuit.
The previous vendor used PPOE for connection and we used a dialer 1 interface to make the connection with a user name and password.
The new connection is a straight WAN DHCP no username or password needed.
I realize I can change the dialer interface from negotiate to DHCP but do I still need it ?
Can I replace the dialer 1 interface with IRB ? Should i just keep the Dialer 1 interface since the device is currently set that way and just remove the PPP negotiation from dialer 1 ?
I just installed WRT54GH and wireless was working fine, after almost 3 hours passed I lost connection with it.I tried to connect using wireless with 3 different notebooks without success. Just using cable it works.I upgraded firmware from v1.0.010 to v1.0.01 but still not working.
I have applied a crypto map (fo ipsec vpn) on the dialer interface (for PPoE connection) in Cisco 2800; every time when the router restarts the crypto map is removed from the dialer interface even though i save the configuration every tim when i apply the map on the interface. Is there any way that the crypto map remains there on the dialer interface after the restart of router.
How to make a Cisco 881 router finally work. I have the following configuration:
Current configuration : 2964 bytes ! ! No configuration change since last restart version 15.1 no service pad service timestamps debug datetime msec service timestamps log datetime msec
[code].....
As much as I understand, the VPN tunnel is active.I can access the Internet, but I cannot access anything through the VPN tunnel.
having some issues with a configuration using a Dialer interface. The interface comes up and the VPN tunnel comes up, but cannot access any network resources or the Internet.
The things that concern me most are my access lists as I have the static IP address that we are assigned via PPPOE - the IP never changes, but not sure if I can define it in the ACL or if I should be using an ANY tag.
Note: I've changed some IPs and username for security reasons.
I am having Cisco 3845 series router with c3900-universalk9-mz.SPA.151-4.M2.bin IOS . I want to install new Licence on it for DATA. When i am trying to install licence on it i am facing the error "% Error: License installation failed with error: XML parsing failed".
I am trying to copy a setup from a Nortel IAX100 where the carrier provides two ATM PVC's over ADSL - one for voice (VoIP) and one for data (IP). Relevant lines from the backup of the IAX's configuration include the following for the PPP authentication over the voice circuit:
The null username and password for the PPP connection have me a bit stumped. Does the PPP connection not use any authenetication at all? (Is that possible/likely? How could I deubg it?) Or does does the IAX100 supply a chap/pap response with null credentails? (If so, how would I duplicate that using an instruction to a dialer interface?I am configuring an 877 with 12.4T and advanced IP services.
