Newsgroup: it.comp.reti.cisco
Titolo: Problema con autenticazione su un 801

Descrivo l'ambiente: un pc con un TA con sistema operativo Windows
2000 che si collega ad un 801 la versione di IOS è la seguente
c800-y6-mw.122-13.T1.bin l'autentificazione sembra andare a buon fine,
ma il router non installa la rotta per cui la comunicazione cade di
seguito il debug ppp negotiation
4d00h: %DIALER-6-BIND: Interface BR0:2 bound to profile Di24
4d00h: %LINK-3-UPDOWN: Interface BRI0:2, changed state to up
4d00h: %ISDN-6-LAYER2UP: Layer 2 for Interface BR0, TEI 88 changed to
up
4d00h: BR0:2 PPP: Using dialer call direction
4d00h: BR0:2 PPP: Treating connection as a callin
4d00h: BR0:2 PPP: Phase is ESTABLISHING, Passive Open
4d00h: BR0:2 LCP: State is Listen
4d00h: BR0:2 LCP: TIMEout: State Listen
4d00h: BR0:2 LCP: O CONFREQ [Listen] id 87 len 15
4d00h: BR0:2 LCP:    AuthProto MS-CHAP-V2 (0x0305C22381)
4d00h: BR0:2 LCP:    MagicNumber 0x16BA1DA1 (0x050616BA1DA1)
4d00h: BR0:2 LCP: I CONFREQ [REQsent] id 0 len 14
4d00h: BR0:2 LCP:    MagicNumber 0x000015F0 (0x0506000015F0)
4d00h: BR0:2 LCP:    PFC (0x0702)
4d00h: BR0:2 LCP:    ACFC (0x0802)
4d00h: BR0:2 LCP: O CONFACK [REQsent] id 0 len 14
4d00h: BR0:2 LCP:    MagicNumber 0x000015F0 (0x0506000015F0)
4d00h: BR0:2 LCP:    PFC (0x0702)
4d00h: BR0:2 LCP:    ACFC (0x0802)
4d00h: BR0:2 LCP: TIMEout: State ACKsent
4d00h: BR0:2 LCP: O CONFREQ [ACKsent] id 88 len 15
4d00h: BR0:2 LCP:    AuthProto MS-CHAP-V2 (0x0305C22381)
4d00h: BR0:2 LCP:    MagicNumber 0x16BA1DA1 (0x050616BA1DA1)
4d00h: BR0:2 LCP: I CONFACK [ACKsent] id 87 len 15
4d00h: BR0:2 LCP:    AuthProto MS-CHAP-V2 (0x0305C22381)
4d00h: BR0:2 LCP:    MagicNumber 0x16BA1DA1 (0x050616BA1DA1)
4d00h: BR0:2 LCP: ID 87 didn't match 88, discarding packet
4d00h: BR0:2 LCP: I CONFREQ [ACKsent] id 1 len 14
4d00h: BR0:2 LCP:    MagicNumber 0x000015F0 (0x0506000015F0)
4d00h: BR0:2 LCP:    PFC (0x0702)
4d00h: BR0:2 LCP:    ACFC (0x0802)
4d00h: BR0:2 LCP: O CONFACK [ACKsent] id 1 len 14
4d00h: BR0:2 LCP:    MagicNumber 0x000015F0 (0x0506000015F0)
4d00h: BR0:2 LCP:    PFC (0x0702)
4d00h: BR0:2 LCP:    ACFC (0x0802)
4d00h: BR0:2 LCP: I CONFACK [ACKsent] id 88 len 15
4d00h: BR0:2 LCP:    AuthProto MS-CHAP-V2 (0x0305C22381)
4d00h: BR0:2 LCP:    MagicNumber 0x16BA1DA1 (0x050616BA1DA1)
4d00h: BR0:2 LCP: State is Open
4d00h: BR0:2 PPP: Phase is AUTHENTICATING, by this end
4d00h: BR0:2 MS-CHAP-V2: O CHALLENGE id 20 len 30 from "xxxxxxxx"
4d00h: BR0:2 MS-CHAP-V2: I RESPONSE id 20 len 63 from "xxxxxxxxx"
4d00h: BR0:2 PPP: Phase is FORWARDING, Attempting Forward
4d00h: BR0:2 PPP: Phase is AUTHENTICATING, Unauthenticated User
4d00h: AAA/AUTHEN/PPP (0000005D): Pick method list 'Permanent Local'
4d00h: BR0:2 PPP: Phase is FORWARDING, Attempting Forward
4d00h: BR0:2 PPP: Phase is AUTHENTICATING, Authenticated User
4d00h: BR0:2 MS-CHAP-V2: O SUCCESS id 20 len 46 msg is
"S=6F555B4A13C0200514430E
168469BA457DF4EFBF"
4d00h: BR0:2 PPP: Phase is UP
4d00h: BR0:2 IPCP: O CONFREQ [Closed] id 1 len 10
4d00h: BR0:2 IPCP:    Address xxx.xxx.xxx.xxx (0x03060A070E04)
4d00h: BR0:2 PPP: Process pending packets
4d00h: BR0:2 IPCP: I CONFREQ [REQsent] id 3 len 34
4d00h: BR0:2 IPCP:    Address xxx.xxx.xxx.xxx (0x03060A070E04)
4d00h: BR0:2 IPCP:    PrimaryDNS 0.0.0.0 (0x810600000000)
4d00h: BR0:2 IPCP:    PrimaryWINS 0.0.0.0 (0x820600000000)
4d00h: BR0:2 IPCP:    SecondaryDNS 0.0.0.0 (0x830600000000)
4d00h: BR0:2 IPCP:    SecondaryWINS 0.0.0.0 (0x840600000000)
4d00h: BR0:2 AAA/AUTHOR/IPCP: Start.  Her address xxx.xxx.xxx.xxx, we
want 0.0.0.0
4d00h: BR0:2 AAA/AUTHOR/IPCP: Reject xxx.xxx.xxx.xxx, using 0.0.0.0
4d00h: BR0:2 AAA/AUTHOR/IPCP: Done.  Her address xxx.xxx.xxx.xxx, we
want 0.0.0.0
4d00h: BR0:2 IPCP: O CONFREJ [REQsent] id 3 len 28
4d00h: BR0:2 IPCP:    PrimaryDNS 0.0.0.0 (0x810600000000)
4d00h: BR0:2 IPCP:    PrimaryWINS 0.0.0.0 (0x820600000000)
4d00h: BR0:2 IPCP:    SecondaryDNS 0.0.0.0 (0x830600000000)
4d00h: BR0:2 IPCP:    SecondaryWINS 0.0.0.0 (0x840600000000)
4d00h: %ISDN-6-CONNECT: Interface BRI0:2 is now connected to 000000000
xxxxxxxxx
4d00h: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:2, changed
state to up
4d00h: %ISDN-6-DISCONNECT: Interface BRI0:2  disconnected from
000000000 xxxxxxxxx, call lasted 7 seconds
4d00h: BR0:2 CCP: I CONFREQ [Not negotiated] id 2 len 10
4d00h: BR0:2 CCP:    MS-PPC supported bits 0x00000000 (0x120600000000)
4d00h: BR0:2 LCP: O PROTREJ [Open] id 89 len 16 protocol CCP
(0x80FD0102000A1206
00000000)
4d00h: BR0:2 IPCP: I CONFACK [REQsent] id 1 len 10
4d00h: BR0:2 IPCP:    Address xxx.xxx.xxx.xxx (0x03060A070E04)
4d00h: %LINK-3-UPDOWN: Interface BRI0:2, changed state to down
4d00h: %DIALER-6-UNBIND: Interface BR0:2 unbound from profile Di24
4d00h: BR0:2 IPCP: I CONFREQ [ACKrcvd] id 4 len 10
4d00h: BR0:2 IPCP:    Address xxx.xxx.xxx.xxx (0x03060A070E04)
4d00h: BR0:2 LCP: O PROTREJ [Open] id 90 len 16 protocol IPCP
(0x80210104000A030
60A070E04)
4d00h: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:2, changed
state to down
4d00h: BR0:2 IPCP: TIMEout: State ACKrcvd
4d00h: BR0:2 IPCP: O CONFREQ [ACKrcvd] id 2 len 10
4d00h: BR0:2 IPCP:    Address xxx.xxx.xxx.xxx (0x03060A070E04)
4d00h: BR0:2 PPP: Sending Acct Event[Down] id[5D]
4d00h: BR0:2 IPCP: State is Closed
4d00h: BR0:2 PPP: Phase is TERMINATING
4d00h: BR0:2 LCP: State is Closed
4d00h: BR0:2 PPP: Phase is DOWN

 seguito il debug ppp negotiation
Cosa intendi per "il router non installa la rotta" ??? non ne capisco
il significato...
A me pare un problema di comunicazione a livello IP, ma le rotte non
centrano nulla con questo...
posta la configurazione del router
p.s.
Beh, questa volta vedo che ci siamo ricordati di nascondere
i parametri...

 seguito il debug ppp negotiation
Mi sembra di capire che Win 2000 chiama. E' configurato per ottenere l'IP
automaticamente?
Che errore ti da win 2000?
Posta 
show running-config interface bri0
e
show running-config int dialer 24
Ciao
-- 
   __|__  Fabio Sardone|  
____(0)_____           | 
http://www.geocities.com/f_sardone/pictures.html
  O  o  O              | Change dot in . and remove .invalid

Ciao
Ciao


 ha scritto nel messaggio
news:3e81b553...@news.nettuno.it...


 esatto
e questo è il problema, il tuo win2000 si aspetta di ricevere l'ind. ip dal
router, ma il router non è configurato per assegnarlo...
Basta impostare l'ip sul profilo ras del tuo win 2000
ciao

 end
beh, il problema vero e' qui. Dov'e' l'ip da assegnare al pc? Aggiungi in
questa interfaccia:
peer default ip address pool net_x
e poi in global configuration mode
ip local pool net_x 192.168.1.1 192.168.1.2
se usi IP privati nel pool usa ip nat inside nella dialer 24.
Ciao
-- 




forse no ....
4d00h: AAA/AUTHEN/PPP (0000005D): Pick method list 'Permanent Local'
4d00h: BR0:2 PPP: Phase is FORWARDING, Attempting Forward
4d00h: BR0:2 PPP: Phase is AUTHENTICATING, Authenticated User
4d00h: BR0:2 MS-CHAP-V2: O SUCCESS id 20 len 46 msg is
"S=6F555B4A13C0200514430E
168469BA457DF4EFBF"
4d00h: BR0:2 PPP: Phase is UP
Nota la linea Success e la linea PPP is UP.


Ho risolto il problema risultava essere un problema sul dialer dove
come dialer remote-name voleva il nome dell'utente che si collegava
cosa che non ininfluiva nella versione di IOS che usavo
precedentemente (12.0-7.T) l'indirizzo ip da usare lo specifico nei
parametri della connessione il problema quindi era nella fase di
autorizzazione come mi diceva Erny
Grazie mille a tutti dei consigli
Massimiliano