|
|
| ttwtang 2002-04-10, 4:03 am |
| Could somebody help me here?
Currently, I am going to setup a ISDN dial-up to internet.
first, i configure my dialer interface.
interface Dialer1
description
ip address negotiated
ip nat outside
encapsulation ppp
no ip route-cache
no ip mroute-cache
dialer pool 1
dialer string 89904000
dialer-group 2
pulse-time 0
ppp authentication chap pap callin
ppp pap sent-username BLABLA password XXXX
ppp multilink
interface BRI1/7
no ip address
encapsulation ppp
dialer pool-member 1
isdn switch-type basic-net3
ppp authentication chap pap callin
while my dialer lists:
access-list 110 permit ip any host 202.187.45.28
access-list 110 permit tcp any host 202.187.45.28
dialer-list 2 protocol ip list 110
when i ping to teh destination, it fails. | |
| MadChef 2002-04-10, 6:26 am |
| quote:
Originally posted by ttwtang
when i ping to teh destination, it fails.
You should probably give us a little more information than that. What exactly is is failing? Is it dialing? If not, what does show isdn stat show? If so, it is negotiating ppp and authenticating correctly? Do a debug ppp neg and debug ppp auth to watch the process. You have a pap username configured, but you're trying to use chap first. Do you really want to use chap and are your hostname password pairs configured properly?
Let us know a little more and we can try to help.
Madchef | |
| Yeti-GBR1 2002-04-10, 7:27 am |
| Ok my suggestion is reduce it to the basics 1st and then add in item by item until the whole thing either works or stops working...my gut feeling is the authentification or the dialer string is failing...just my 2p's worth
Whats this for? dialer-group 2 should it not be dialer-group 1?????
Also what is dialer-list 2 refering to? | |
| peterd 2002-04-10, 7:45 am |
| hi Yeti,
in interface dialer1, doesn't dialer-group 2 refer to dialer-list 2 and dialer-list 2 refers to access-list 101?
It's how you attach an access-list to a dialer isn't it? It seems a long way around but I've not done much with dialer-lists. If I need to set one up I usually just refer to a known working config and basically copy that if I need to set one up.
As for the original query, doesn't the access-list also need to allow UDP to get pings through?
Regards
Peter | |
| Yeti-GBR1 2002-04-10, 7:49 am |
| Hi Peter,
Yeah I know what they are and how to use them...what I was meaning is that their naming seemed a bit strange or skew whiff if you know what I mean... | |
| wirechild 2002-04-10, 1:09 pm |
| May I suggest that you start out with a very basic config and the BRI up and working before you configure the rest.
Is it even dialing? | |
| ttwtang 2002-04-10, 8:16 pm |
| apologise for insufficient info here.
When I tried to ping to the destination, the debug message is "sending" then followed by "encapsulation failed". The BRI interface's layer 1, 2 & 3 are working fine.
The ISDN line is working fine.
Well, I have tested the number to be dialed, it does give me tones....
Dialer-group 2 is pointed the dialer list 2. While dialer list is pointed to the access-lists. I know this is long way. Well, I'll try to change the IOS conf back to basic first.
I suspect the router doesn't not know how to trigger the dialing. Will let you all know the problem. | |
| MadChef 2002-04-10, 8:38 pm |
| quote:
Originally posted by ttwtang
I suspect the router doesn't not know how to trigger the dialing. Will let you all know the problem.
You can easily test this by doing a debug dialer. Your dialer list is pretty specific, so make sure you're actually meeting those criteria.
I would do a debug dialer to see that you're generating interesting packets. If it's dialing but the isdn link doesn't come up, then do a debug ppp auth and debug ppp neg to determine why it's not coming up. I think you would get encapsulation failed if IPCP failed to come up. You should get notice of that in the debug ppp neg.
MadChef | |
| ttwtang 2002-04-10, 8:42 pm |
| a very stupid question here:
is a ping test an interesting traffic?
So, what i need to do is turn the debug pp and auth, and start pinging, then errors should come out right? | |
| MadChef 2002-04-11, 5:59 am |
| quote:
Originally posted by ttwtang
a very stupid question here:
is a ping test an interesting traffic?
It is if you're pinging 202.187.45.28. The only thing you have as interesting traffic goes to 202.187.45.28, but not anywhere else. Debug dialer will let you know if you're generating interesting traffic.
MadChef | |
| ttwtang 2002-04-11, 10:41 pm |
| yeah, finally i solve the problem. I am ble to dial from the router but not my PC.
I have this in my global:
ip route 0.0.0.0 0.0.0.0 Dialer2
dialer-list 1 protocol ip permit
and this in my dialer int:
dialer-group 1
now my another problem is: i set my PC's gateway to the Router's Eth Ip, i can ping to that interface definitely (coz i can telnet), but when i issue a ping to the destination, request timeout.
But fromrouter, it work fine. |
|
|
|