Mailing List Archive

VPDN session stuck in wiccn state ?
Anyone come across what the state "wiccn" means on an LNS? We're seeing
a lot of this happen after reducing our LNS farm from several LNS's to
just a few more powerful LNS's. This is causing a lot of customers to
time out when trying to authenticate. The LAC is not controlled by us
and they are not seeing anything unusual on their end. Nothing is coming
up when doing a google search either.

lns1#sh vpdn session | inc wiccn

LocID RemID TunID Username, Intf/ State Last Chg
Uniq ID
46266 62779 21116 -, - wiccn 00:00:27 0

38898 62763 21116 -, - wiccn 00:00:28 0

36980 61040 21116 -, - wiccn 00:05:07 0

60922 61168 21116 -, - wiccn 00:04:56 0

45453 61888 21116 -, - wiccn 00:02:51 0

59899 61094 21116 -, - wiccn 00:05:03 0

49728 61204 21116 -, - wiccn 00:04:51 0

10563 61331 21116 -, - wiccn 00:04:24 0

42961 61043 21116 -, - wiccn 00:05:06 0

9611 62735 21116 -, - wiccn 00:00:31 0

17752 61336 21116 -, - wiccn 00:04:24 0

4424 61827 21116 -, - wiccn 00:03:04 0

4030 62752 21116 -, - wiccn 00:00:29 0

11718 62064 21116 -, - wiccn 00:02:20 0

12672 62634 21116 -, - wiccn 00:00:48 0

62725 62713 21116 -, - wiccn 00:00:33 0

58871 61863 21116 -, - wiccn 00:02:57 0

18588 62778 21116 -, - wiccn 00:00:27 0


--

Regards,

Andy Saykao
Systems Administrator
Netspace Online Systems Pty Ltd
Phone : 03 9811 0049
Mobile : 0401 422 406
Fax : 03 9811 0044
E-Mail : andy.saykao@staff.netspace.net.au
<blocked::mailto:andy.saykao@staff.netspace.net.au>


This email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
Please notify the sender immediately by email if you have received this
email by mistake and delete this email from your system. Please note that
any views or opinions presented in this email are solely those of the
author and do not necessarily represent those of the organisation.
Finally, the recipient should check this email and any attachments for
the presence of viruses. The organisation accepts no liability for any
damage caused by any virus transmitted by this email.
Re: VPDN session stuck in wiccn state ? [ In reply to ]
Hi Andy,

According to the command reference the valid "states" are:

===========
Status for the individual user in the tunnel; can be one of the following states:
•est
•opening
•open
•closing
•closed
•waiting_for_tunnel

The waiting_for_tunnel state means that the user connection is waiting until the main tunnel can be brought up before it moves to the opening state.
============

One thing I can see from your output is that all of the sessions with this state are on the same tunnel (TunID: 21116). Do you have any other sessions that are working on this same tunnel ?

Is it happening across all of your LNS, or just one ? When you upgraded did you change IOS ? What IOS version are you running ? Have you tried a different IOS ? Does a reboot fix the problem ?

Did the LAC provider ("T" or "O" ?) have to change anything on their end as part of the changes ? They will always say that everything is ok, doesn't mean it is :)

Given that I can't find any reference to that particular state either, it's looking like possibly a bug and you should probably log a case with TAC :(


regards,
Tony.



--- On Thu, 26/3/09, Andy Saykao <andy.saykao@staff.netspace.net.au> wrote:

> From: Andy Saykao <andy.saykao@staff.netspace.net.au>
> Subject: [cisco-bba] VPDN session stuck in wiccn state ?
> To: cisco-bba@puck.nether.net
> Date: Thursday, 26 March, 2009, 11:17 AM
>
>
>
>
>
> Anyone come across
> what the state
> "wiccn" means on an LNS?
> We're seeing a lot of this happen
> after reducing
> our LNS farm from
> several LNS's to just a few more powerful LNS's.
> This is causing a lot of
> customers to time out when trying to authenticate. The LAC
> is not controlled by
> us and they are not seeing anything unusual on their
> end. Nothing is coming up when
> doing a google search
> either.
>
> lns1#sh vpdn session | inc
> wiccn
>
> LocID
> RemID
> TunID
> Username, Intf/ State
> Last Chg Uniq
> ID
> 46266
> 62779
> 21116 -,
> -
>
> wiccn 00:00:27
> 0
>
> 38898
> 62763
> 21116 -,
> -
>
> wiccn 00:00:28
> 0
>
> 36980
> 61040
> 21116 -,
> -
>
> wiccn 00:05:07
> 0
>
> 60922
> 61168
> 21116 -,
> -
>
> wiccn 00:04:56
> 0
>
> 45453
> 61888
> 21116 -,
> -
>
> wiccn 00:02:51
> 0
>
> 59899
> 61094
> 21116 -,
> -
>
> wiccn 00:05:03
> 0
>
> 49728
> 61204
> 21116 -,
> -
>
> wiccn 00:04:51
> 0
>
> 10563
> 61331
> 21116 -,
> -
>
> wiccn 00:04:24
> 0
>
> 42961
> 61043
> 21116 -,
> -
>
> wiccn 00:05:06
> 0
>
> 9611
> 62735
> 21116 -,
> -
>
> wiccn 00:00:31
> 0
>
> 17752
> 61336
> 21116 -,
> -
>
> wiccn 00:04:24
> 0
>
> 4424
> 61827
> 21116 -,
> -
>
> wiccn 00:03:04
> 0
>
> 4030
> 62752
> 21116 -,
> -
>
> wiccn 00:00:29
> 0
>
> 11718
> 62064
> 21116 -,
> -
>
> wiccn 00:02:20
> 0
>
> 12672
> 62634
> 21116 -,
> -
>
> wiccn 00:00:48
> 0
>
> 62725
> 62713
> 21116 -,
> -
>
> wiccn 00:00:33
> 0
>
> 58871
> 61863
> 21116 -,
> -
>
> wiccn 00:02:57
> 0
>
> 18588
> 62778
> 21116 -,
> -
>
> wiccn 00:00:27
> 0
>
>
>
> --
>
> Regards,
>
> Andy
> Saykao
> Systems
> Administrator
> Netspace Online Systems
> Pty
> Ltd
> Phone : 03 9811
> 0049
> Mobile : 0401 422
> 406
> Fax : 03
> 9811 0044
> E-Mail : andy.saykao@staff.netspace.net.au
> This email and any files transmitted with it are
> confidential and intended solely for the use of the
> individual or entity to whom they are addressed. Please
> notify the sender immediately by email if you have received
> this email by mistake and delete this email from your
> system. Please note that any views or opinions presented in
> this email are solely those of the author and do not
> necessarily represent those of the organisation. Finally,
> the recipient should check this email and any attachments
> for the presence of viruses. The organisation accepts no
> liability for any damage caused by any virus transmitted by
> this email.
>
> -----Inline Attachment Follows-----
>
> _______________________________________________
> cisco-bba mailing list
> cisco-bba@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-bba




_______________________________________________
cisco-bba mailing list
cisco-bba@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-bba
Re: VPDN session stuck in wiccn state ? [ In reply to ]
Hi Tony,

Thank you for your reply.

> One thing I can see from your output is that all of the sessions with
this state are on the same tunnel (TunID: 21116). Do you have any other
sessions that are working on this same tunnel ?

Yes there are valid sessions on the tunnel.

> Is it happening across all of your LNS, or just one ? When you
upgraded did you change IOS ? What IOS version are you running ? Have
you tried a different IOS ? Does a reboot fix the problem ?

It's happening across all of our LNS's. We've been working extensively
with Cisco to get these LNS's up and running and using a special
engineering release from the 12.2(33) train. No, we have not tried a
different IOS given that we've been working with Cisco on getting this
far already.

A reboot fixes the problem temporarily but when we arrive the next day,
there's a whole bunch of sessions waiting for us stuck in this "wiccn"
state.

> Did the LAC provider ("T" or "O" ?) have to change anything on their
> end as part of the changes ? They will always say that everything is
> ok, doesn't mean it is :)

We terminate a few tunnels from a variety of Service Providers on these
LNS's and are currently only having issues with one provider where we
encounter this problem.

Cheers.

Andy

This email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
Please notify the sender immediately by email if you have received this
email by mistake and delete this email from your system. Please note that
any views or opinions presented in this email are solely those of the
author and do not necessarily represent those of the organisation.
Finally, the recipient should check this email and any attachments for
the presence of viruses. The organisation accepts no liability for any
damage caused by any virus transmitted by this email.

_______________________________________________
cisco-bba mailing list
cisco-bba@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-bba
Re: VPDN session stuck in wiccn state ? [ In reply to ]
Hi Andy,

I've pretty much out of ideas now then, sorry :(

If you've opened a case with TAC, you may just have to wait for them to sort it out with you. I would press them to find out what that state of "wiccn" means.. If it's not a valid state, then it's coming from within the IOS code somewhere and they should be able to trace it and find where. Keep requesting escalations on your case until it gets to someone who knows/cares.

You could try downgrading to a different IOS, unless you definitely need something in the special release you are using to make it work.

If it's only tunnels from one provider, is it from all of their LAC, or a subset of their LAC ?


regards,
Tony.



--- On Thu, 26/3/09, Andy Saykao <andy.saykao@staff.netspace.net.au> wrote:

> From: Andy Saykao <andy.saykao@staff.netspace.net.au>
> Subject: RE: [cisco-bba] VPDN session stuck in wiccn state ?
> To: "Tony" <td_miles@yahoo.com>, cisco-bba@puck.nether.net
> Date: Thursday, 26 March, 2009, 11:56 AM
>
> Hi Tony,
>
> Thank you for your reply.
>
> > One thing I can see from your output is that all of
> the sessions with
> this state are on the same tunnel (TunID: 21116). Do you
> have any other
> sessions that are working on this same tunnel ?
>
> Yes there are valid sessions on the tunnel.
>
> > Is it happening across all of your LNS, or just one ?
> When you
> upgraded did you change IOS ? What IOS version are you
> running ? Have
> you tried a different IOS ? Does a reboot fix the problem
> ?
>
> It's happening across all of our LNS's. We've been working
> extensively
> with Cisco to get these LNS's up and running and using a
> special
> engineering release from the 12.2(33) train. No, we have
> not tried a
> different IOS given that we've been working with Cisco on
> getting this
> far already.
>
> A reboot fixes the problem temporarily but when we arrive
> the next day,
> there's a whole bunch of sessions waiting for us stuck in
> this "wiccn"
> state.
>
> > Did the LAC provider ("T" or "O" ?) have to change
> anything on their
> > end as part of the changes ? They will always say that
> everything is
> > ok, doesn't mean it is :)
>
> We terminate a few tunnels from a variety of Service
> Providers on these
> LNS's and are currently only having issues with one
> provider where we
> encounter this problem.
>
> Cheers.
>
> Andy
>




_______________________________________________
cisco-bba mailing list
cisco-bba@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-bba
Re: VPDN session stuck in wiccn state ? [ In reply to ]
Much appreciate your help Tony.

Not sure if it's from all their LAC's or a subset, but will keep this in
mind.

Thanks.


--

Regards,

Andy Saykao
Systems Administrator
Netspace Online Systems Pty Ltd
Phone : 03 9811 0049
Mobile : 0401 422 406
Fax : 03 9811 0044
E-Mail : andy.saykao@staff.netspace.net.au

-----Original Message-----
From: Tony [mailto:td_miles@yahoo.com]
Sent: Thursday, 26 March 2009 12:18 PM
To: cisco-bba@puck.nether.net; Andy Saykao
Subject: RE: [cisco-bba] VPDN session stuck in wiccn state ?


Hi Andy,

I've pretty much out of ideas now then, sorry :(

If you've opened a case with TAC, you may just have to wait for them to
sort it out with you. I would press them to find out what that state of
"wiccn" means.. If it's not a valid state, then it's coming from within
the IOS code somewhere and they should be able to trace it and find
where. Keep requesting escalations on your case until it gets to someone
who knows/cares.

You could try downgrading to a different IOS, unless you definitely need
something in the special release you are using to make it work.

If it's only tunnels from one provider, is it from all of their LAC, or
a subset of their LAC ?


regards,
Tony.



--- On Thu, 26/3/09, Andy Saykao <andy.saykao@staff.netspace.net.au>
wrote:

> From: Andy Saykao <andy.saykao@staff.netspace.net.au>
> Subject: RE: [cisco-bba] VPDN session stuck in wiccn state ?
> To: "Tony" <td_miles@yahoo.com>, cisco-bba@puck.nether.net
> Date: Thursday, 26 March, 2009, 11:56 AM
>
> Hi Tony,
>
> Thank you for your reply.
>
> > One thing I can see from your output is that all of
> the sessions with
> this state are on the same tunnel (TunID: 21116). Do you have any
> other sessions that are working on this same tunnel ?
>
> Yes there are valid sessions on the tunnel.
>
> > Is it happening across all of your LNS, or just one ?
> When you
> upgraded did you change IOS ? What IOS version are you running ? Have
> you tried a different IOS ? Does a reboot fix the problem ?
>
> It's happening across all of our LNS's. We've been working extensively

> with Cisco to get these LNS's up and running and using a special
> engineering release from the 12.2(33) train. No, we have not tried a
> different IOS given that we've been working with Cisco on getting this

> far already.
>
> A reboot fixes the problem temporarily but when we arrive the next
> day, there's a whole bunch of sessions waiting for us stuck in this
> "wiccn"
> state.
>
> > Did the LAC provider ("T" or "O" ?) have to change
> anything on their
> > end as part of the changes ? They will always say that
> everything is
> > ok, doesn't mean it is :)
>
> We terminate a few tunnels from a variety of Service Providers on
> these LNS's and are currently only having issues with one provider
> where we encounter this problem.
>
> Cheers.
>
> Andy
>





______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________

This email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
Please notify the sender immediately by email if you have received this
email by mistake and delete this email from your system. Please note that
any views or opinions presented in this email are solely those of the
author and do not necessarily represent those of the organisation.
Finally, the recipient should check this email and any attachments for
the presence of viruses. The organisation accepts no liability for any
damage caused by any virus transmitted by this email.

_______________________________________________
cisco-bba mailing list
cisco-bba@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-bba
Re: VPDN session stuck in wiccn state ? [ In reply to ]
No problems, althought I don't think I actually helped any.

I'd appreciate if you could let us (list) know what the solution is when you get it sorted.


Thanks,
Tony.


--- On Thu, 26/3/09, Andy Saykao <andy.saykao@staff.netspace.net.au> wrote:

> From: Andy Saykao <andy.saykao@staff.netspace.net.au>
> Subject: RE: [cisco-bba] VPDN session stuck in wiccn state ?
> To: "Tony" <td_miles@yahoo.com>, cisco-bba@puck.nether.net
> Date: Thursday, 26 March, 2009, 12:24 PM
> Much appreciate your help Tony.
>
> Not sure if it's from all their LAC's or a subset, but will
> keep this in
> mind.
>
> Thanks.
>
>
> --
>
> Regards,
>
> Andy Saykao
> Systems Administrator
> Netspace Online Systems Pty Ltd
> Phone : 03 9811 0049
> Mobile : 0401 422 406
> Fax : 03 9811 0044
> E-Mail : andy.saykao@staff.netspace.net.au
>
> -----Original Message-----
> From: Tony [mailto:td_miles@yahoo.com]
>
> Sent: Thursday, 26 March 2009 12:18 PM
> To: cisco-bba@puck.nether.net;
> Andy Saykao
> Subject: RE: [cisco-bba] VPDN session stuck in wiccn state
> ?
>
>
> Hi Andy,
>
> I've pretty much out of ideas now then, sorry :(
>
> If you've opened a case with TAC, you may just have to wait
> for them to
> sort it out with you. I would press them to find out what
> that state of
> "wiccn" means.. If it's not a valid state, then it's coming
> from within
> the IOS code somewhere and they should be able to trace it
> and find
> where. Keep requesting escalations on your case until it
> gets to someone
> who knows/cares.
>
> You could try downgrading to a different IOS, unless you
> definitely need
> something in the special release you are using to make it
> work.
>
> If it's only tunnels from one provider, is it from all of
> their LAC, or
> a subset of their LAC ?
>
>
> regards,
> Tony.
>
>
>
> --- On Thu, 26/3/09, Andy Saykao <andy.saykao@staff.netspace.net.au>
> wrote:
>
> > From: Andy Saykao <andy.saykao@staff.netspace.net.au>
> > Subject: RE: [cisco-bba] VPDN session stuck in
> wiccn state ?
> > To: "Tony" <td_miles@yahoo.com>,
> cisco-bba@puck.nether.net
> > Date: Thursday, 26 March, 2009, 11:56 AM
> >
> > Hi Tony,
> >
> > Thank you for your reply.
> >
> > > One thing I can see from your output is that all
> of
> > the sessions with
> > this state are on the same tunnel (TunID: 21116). Do
> you have any
> > other sessions that are working on this same tunnel ?
> >
> > Yes there are valid sessions on the tunnel.
> >
> > > Is it happening across all of your LNS, or just
> one ?
> > When you
> > upgraded did you change IOS ? What IOS version are you
> running ? Have
> > you tried a different IOS ? Does a reboot fix the
> problem ?
> >
> > It's happening across all of our LNS's. We've been
> working extensively
>
> > with Cisco to get these LNS's up and running and using
> a special
> > engineering release from the 12.2(33) train. No, we
> have not tried a
> > different IOS given that we've been working with Cisco
> on getting this
>
> > far already.
> >
> > A reboot fixes the problem temporarily but when we
> arrive the next
> > day, there's a whole bunch of sessions waiting for us
> stuck in this
> > "wiccn"
> > state.
> >
> > > Did the LAC provider ("T" or "O" ?) have to
> change
> > anything on their
> > > end as part of the changes ? They will always say
> that
> > everything is
> > > ok, doesn't mean it is :)
> >
> > We terminate a few tunnels from a variety of Service
> Providers on
> > these LNS's and are currently only having issues with
> one provider
> > where we encounter this problem.
> >
> > Cheers.
> >
> > Andy
> >
>
>
>
>
>
> ______________________________________________________________________
> This email has been scanned by the MessageLabs Email
> Security System.
> For more information please visit http://www.messagelabs.com/email
> ______________________________________________________________________
>
> This email and any files transmitted with it are
> confidential and intended
> solely for the use of the individual or entity to whom
> they are addressed.
> Please notify the sender immediately by email if you have
> received this
> email by mistake and delete this email from your system.
> Please note that
> any views or opinions presented in this email are solely
> those of the
> author and do not necessarily represent those of the
> organisation.
> Finally, the recipient should check this email and any
> attachments for
> the presence of viruses. The organisation accepts no
> liability for any
> damage caused by any virus transmitted by this email.
>
>



_______________________________________________
cisco-bba mailing list
cisco-bba@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-bba
Re: VPDN session stuck in wiccn state ? [ In reply to ]
Hi Andy,
WICCN is a WAIT ICCN state ,its one of the state in l2tp negotiations.
Have you tried configuring lcp renegotiation ?
Which router are you using?
As you have shifted to more power LNS,I believe there is a configuration
problem.

Thanks
Raghu
SAVE TREES..GO GREEN

On Thu, Mar 26, 2009 at 7:13 AM, Tony <td_miles@yahoo.com> wrote:

>
> No problems, althought I don't think I actually helped any.
>
> I'd appreciate if you could let us (list) know what the solution is when
> you get it sorted.
>
>
> Thanks,
> Tony.
>
>
> --- On Thu, 26/3/09, Andy Saykao <andy.saykao@staff.netspace.net.au>
> wrote:
>
> > From: Andy Saykao <andy.saykao@staff.netspace.net.au>
> > Subject: RE: [cisco-bba] VPDN session stuck in wiccn state ?
> > To: "Tony" <td_miles@yahoo.com>, cisco-bba@puck.nether.net
> > Date: Thursday, 26 March, 2009, 12:24 PM
> > Much appreciate your help Tony.
> >
> > Not sure if it's from all their LAC's or a subset, but will
> > keep this in
> > mind.
> >
> > Thanks.
> >
> >
> > --
> >
> > Regards,
> >
> > Andy Saykao
> > Systems Administrator
> > Netspace Online Systems Pty Ltd
> > Phone : 03 9811 0049
> > Mobile : 0401 422 406
> > Fax : 03 9811 0044
> > E-Mail : andy.saykao@staff.netspace.net.au
> >
> > -----Original Message-----
> > From: Tony [mailto:td_miles@yahoo.com]
> >
> > Sent: Thursday, 26 March 2009 12:18 PM
> > To: cisco-bba@puck.nether.net;
> > Andy Saykao
> > Subject: RE: [cisco-bba] VPDN session stuck in wiccn state
> > ?
> >
> >
> > Hi Andy,
> >
> > I've pretty much out of ideas now then, sorry :(
> >
> > If you've opened a case with TAC, you may just have to wait
> > for them to
> > sort it out with you. I would press them to find out what
> > that state of
> > "wiccn" means.. If it's not a valid state, then it's coming
> > from within
> > the IOS code somewhere and they should be able to trace it
> > and find
> > where. Keep requesting escalations on your case until it
> > gets to someone
> > who knows/cares.
> >
> > You could try downgrading to a different IOS, unless you
> > definitely need
> > something in the special release you are using to make it
> > work.
> >
> > If it's only tunnels from one provider, is it from all of
> > their LAC, or
> > a subset of their LAC ?
> >
> >
> > regards,
> > Tony.
> >
> >
> >
> > --- On Thu, 26/3/09, Andy Saykao <andy.saykao@staff.netspace.net.au>
> > wrote:
> >
> > > From: Andy Saykao <andy.saykao@staff.netspace.net.au>
> > > Subject: RE: [cisco-bba] VPDN session stuck in
> > wiccn state ?
> > > To: "Tony" <td_miles@yahoo.com>,
> > cisco-bba@puck.nether.net
> > > Date: Thursday, 26 March, 2009, 11:56 AM
> > >
> > > Hi Tony,
> > >
> > > Thank you for your reply.
> > >
> > > > One thing I can see from your output is that all
> > of
> > > the sessions with
> > > this state are on the same tunnel (TunID: 21116). Do
> > you have any
> > > other sessions that are working on this same tunnel ?
> > >
> > > Yes there are valid sessions on the tunnel.
> > >
> > > > Is it happening across all of your LNS, or just
> > one ?
> > > When you
> > > upgraded did you change IOS ? What IOS version are you
> > running ? Have
> > > you tried a different IOS ? Does a reboot fix the
> > problem ?
> > >
> > > It's happening across all of our LNS's. We've been
> > working extensively
> >
> > > with Cisco to get these LNS's up and running and using
> > a special
> > > engineering release from the 12.2(33) train. No, we
> > have not tried a
> > > different IOS given that we've been working with Cisco
> > on getting this
> >
> > > far already.
> > >
> > > A reboot fixes the problem temporarily but when we
> > arrive the next
> > > day, there's a whole bunch of sessions waiting for us
> > stuck in this
> > > "wiccn"
> > > state.
> > >
> > > > Did the LAC provider ("T" or "O" ?) have to
> > change
> > > anything on their
> > > > end as part of the changes ? They will always say
> > that
> > > everything is
> > > > ok, doesn't mean it is :)
> > >
> > > We terminate a few tunnels from a variety of Service
> > Providers on
> > > these LNS's and are currently only having issues with
> > one provider
> > > where we encounter this problem.
> > >
> > > Cheers.
> > >
> > > Andy
> > >
> >
> >
> >
> >
> >
> > ______________________________________________________________________
> > This email has been scanned by the MessageLabs Email
> > Security System.
> > For more information please visit http://www.messagelabs.com/email
> > ______________________________________________________________________
> >
> > This email and any files transmitted with it are
> > confidential and intended
> > solely for the use of the individual or entity to whom
> > they are addressed.
> > Please notify the sender immediately by email if you have
> > received this
> > email by mistake and delete this email from your system.
> > Please note that
> > any views or opinions presented in this email are solely
> > those of the
> > author and do not necessarily represent those of the
> > organisation.
> > Finally, the recipient should check this email and any
> > attachments for
> > the presence of viruses. The organisation accepts no
> > liability for any
> > damage caused by any virus transmitted by this email.
> >
> >
>
>
>
> _______________________________________________
> cisco-bba mailing list
> cisco-bba@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-bba
>



--
Thanks
Raghu
Re: VPDN session stuck in wiccn state ? [ In reply to ]
Hi Raghu,

Yes we are using lcp renegotiation in the VPDN config (see below).

vpdn-group <Provider_Name>
accept-dialin
protocol l2tp
virtual-template 2
terminate-from hostname <Provider_Name>
source-ip 203.17.x.x
lcp renegotiation on-mismatch
l2tp tunnel password <password>
l2tp tunnel receive-window 100
l2tp tunnel retransmit timeout min 2

This is the same VPDN config we use for a few other Providers which we
aren't seeing the same problem with.

--

Regards,

Andy Saykao
Systems Administrator
Netspace Online Systems Pty Ltd
Phone : 03 9811 0049
Mobile : 0401 422 406
Fax : 03 9811 0044
E-Mail : andy.saykao@staff.netspace.net.au
<blocked::mailto:andy.saykao@staff.netspace.net.au>


________________________________

From: raghuram chary [mailto:raghujindia@gmail.com]
Sent: Thursday, 26 March 2009 8:05 PM
To: Andy Saykao
Cc: cisco-bba@puck.nether.net; Tony
Subject: Re: [cisco-bba] VPDN session stuck in wiccn state ?


Hi Andy,
WICCN is a WAIT ICCN state ,its one of the state in l2tp negotiations.
Have you tried configuring lcp renegotiation ?
Which router are you using?
As you have shifted to more power LNS,I believe there is a configuration
problem.

Thanks
Raghu
SAVE TREES..GO GREEN


On Thu, Mar 26, 2009 at 7:13 AM, Tony <td_miles@yahoo.com> wrote:



No problems, althought I don't think I actually helped any.

I'd appreciate if you could let us (list) know what the solution
is when you get it sorted.


Thanks,

Tony.


--- On Thu, 26/3/09, Andy Saykao
<andy.saykao@staff.netspace.net.au> wrote:

> From: Andy Saykao <andy.saykao@staff.netspace.net.au>
> Subject: RE: [cisco-bba] VPDN session stuck in wiccn state ?
> To: "Tony" <td_miles@yahoo.com>, cisco-bba@puck.nether.net

> Date: Thursday, 26 March, 2009, 12:24 PM

> Much appreciate your help Tony.
>
> Not sure if it's from all their LAC's or a subset, but will
> keep this in
> mind.
>
> Thanks.
>
>
> --
>
> Regards,
>
> Andy Saykao
> Systems Administrator
> Netspace Online Systems Pty Ltd
> Phone : 03 9811 0049
> Mobile : 0401 422 406
> Fax : 03 9811 0044
> E-Mail : andy.saykao@staff.netspace.net.au
>
> -----Original Message-----
> From: Tony [mailto:td_miles@yahoo.com]
>
> Sent: Thursday, 26 March 2009 12:18 PM
> To: cisco-bba@puck.nether.net;
> Andy Saykao
> Subject: RE: [cisco-bba] VPDN session stuck in wiccn state
> ?
>
>
> Hi Andy,
>
> I've pretty much out of ideas now then, sorry :(
>
> If you've opened a case with TAC, you may just have to wait
> for them to
> sort it out with you. I would press them to find out what
> that state of
> "wiccn" means.. If it's not a valid state, then it's coming
> from within
> the IOS code somewhere and they should be able to trace it
> and find
> where. Keep requesting escalations on your case until it
> gets to someone
> who knows/cares.
>
> You could try downgrading to a different IOS, unless you
> definitely need
> something in the special release you are using to make it
> work.
>
> If it's only tunnels from one provider, is it from all of
> their LAC, or
> a subset of their LAC ?
>
>
> regards,
> Tony.
>
>
>
> --- On Thu, 26/3/09, Andy Saykao
<andy.saykao@staff.netspace.net.au>
> wrote:
>
> > From: Andy Saykao <andy.saykao@staff.netspace.net.au>
> > Subject: RE: [cisco-bba] VPDN session stuck in
> wiccn state ?
> > To: "Tony" <td_miles@yahoo.com>,
> cisco-bba@puck.nether.net
> > Date: Thursday, 26 March, 2009, 11:56 AM
> >
> > Hi Tony,
> >
> > Thank you for your reply.
> >
> > > One thing I can see from your output is that all
> of
> > the sessions with
> > this state are on the same tunnel (TunID: 21116). Do
> you have any
> > other sessions that are working on this same tunnel ?
> >
> > Yes there are valid sessions on the tunnel.
> >
> > > Is it happening across all of your LNS, or just
> one ?
> > When you
> > upgraded did you change IOS ? What IOS version are you
> running ? Have
> > you tried a different IOS ? Does a reboot fix the
> problem ?
> >
> > It's happening across all of our LNS's. We've been
> working extensively
>
> > with Cisco to get these LNS's up and running and using
> a special
> > engineering release from the 12.2(33) train. No, we
> have not tried a
> > different IOS given that we've been working with Cisco
> on getting this
>
> > far already.
> >
> > A reboot fixes the problem temporarily but when we
> arrive the next
> > day, there's a whole bunch of sessions waiting for us
> stuck in this
> > "wiccn"
> > state.
> >
> > > Did the LAC provider ("T" or "O" ?) have to
> change
> > anything on their
> > > end as part of the changes ? They will always say
> that
> > everything is
> > > ok, doesn't mean it is :)
> >
> > We terminate a few tunnels from a variety of Service
> Providers on
> > these LNS's and are currently only having issues with
> one provider
> > where we encounter this problem.
> >
> > Cheers.
> >
> > Andy
> >
>
>
>
>
>
>
______________________________________________________________________
> This email has been scanned by the MessageLabs Email
> Security System.
> For more information please visit
http://www.messagelabs.com/email
>
______________________________________________________________________
>
> This email and any files transmitted with it are
> confidential and intended
> solely for the use of the individual or entity to whom
> they are addressed.
> Please notify the sender immediately by email if you have
> received this
> email by mistake and delete this email from your system.
> Please note that
> any views or opinions presented in this email are solely
> those of the
> author and do not necessarily represent those of the
> organisation.
> Finally, the recipient should check this email and any
> attachments for
> the presence of viruses. The organisation accepts no
> liability for any
> damage caused by any virus transmitted by this email.
>
>



_______________________________________________
cisco-bba mailing list
cisco-bba@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-bba





--
Thanks
Raghu

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________
Re: VPDN session stuck in wiccn state ? [ In reply to ]
Hi Andy,
I think you need to configure lcp reneg always and clear the tunnel.
Even if this doesnt work, try setting ppp mrru in the template.
And even if this doesnt work raise case as suggested by Tony :)

Thanks
Raghu
SAVE TREES..GO GREEN

On Fri, Mar 27, 2009 at 5:24 AM, Andy Saykao <
andy.saykao@staff.netspace.net.au> wrote:

> Hi Raghu,
>
> Yes we are using lcp renegotiation in the VPDN config (see below).
>
> vpdn-group <Provider_Name>
> accept-dialin
> protocol l2tp
> virtual-template 2
> terminate-from hostname <Provider_Name>
> source-ip 203.17.x.x
> lcp renegotiation on-mismatch
> l2tp tunnel password <password>
> l2tp tunnel receive-window 100
> l2tp tunnel retransmit timeout min 2
> This is the same VPDN config we use for a few other Providers which we
> aren't seeing the same problem with.
>
> --
>
> Regards,
>
> Andy Saykao
> Systems Administrator
> Netspace Online Systems Pty Ltd
> Phone : 03 9811 0049
> Mobile : 0401 422 406
> Fax : 03 9811 0044
> E-Mail : andy.saykao@staff.netspace.net.au
>
>
> ------------------------------
> *From:* raghuram chary [mailto:raghujindia@gmail.com]
> *Sent:* Thursday, 26 March 2009 8:05 PM
> *To:* Andy Saykao
> *Cc:* cisco-bba@puck.nether.net; Tony
> *Subject:* Re: [cisco-bba] VPDN session stuck in wiccn state ?
>
> Hi Andy,
> WICCN is a WAIT ICCN state ,its one of the state in l2tp negotiations.
> Have you tried configuring lcp renegotiation ?
> Which router are you using?
> As you have shifted to more power LNS,I believe there is a configuration
> problem.
>
> Thanks
> Raghu
> SAVE TREES..GO GREEN
>
> On Thu, Mar 26, 2009 at 7:13 AM, Tony <td_miles@yahoo.com> wrote:
>
>>
>> No problems, althought I don't think I actually helped any.
>>
>> I'd appreciate if you could let us (list) know what the solution is when
>> you get it sorted.
>>
>>
>> Thanks,
>> Tony.
>>
>>
>> --- On Thu, 26/3/09, Andy Saykao <andy.saykao@staff.netspace.net.au>
>> wrote:
>>
>> > From: Andy Saykao <andy.saykao@staff.netspace.net.au>
>> > Subject: RE: [cisco-bba] VPDN session stuck in wiccn state ?
>> > To: "Tony" <td_miles@yahoo.com>, cisco-bba@puck.nether.net
>> > Date: Thursday, 26 March, 2009, 12:24 PM
>> > Much appreciate your help Tony.
>> >
>> > Not sure if it's from all their LAC's or a subset, but will
>> > keep this in
>> > mind.
>> >
>> > Thanks.
>> >
>> >
>> > --
>> >
>> > Regards,
>> >
>> > Andy Saykao
>> > Systems Administrator
>> > Netspace Online Systems Pty Ltd
>> > Phone : 03 9811 0049
>> > Mobile : 0401 422 406
>> > Fax : 03 9811 0044
>> > E-Mail : andy.saykao@staff.netspace.net.au
>> >
>> > -----Original Message-----
>> > From: Tony [mailto:td_miles@yahoo.com]
>> >
>> > Sent: Thursday, 26 March 2009 12:18 PM
>> > To: cisco-bba@puck.nether.net;
>> > Andy Saykao
>> > Subject: RE: [cisco-bba] VPDN session stuck in wiccn state
>> > ?
>> >
>> >
>> > Hi Andy,
>> >
>> > I've pretty much out of ideas now then, sorry :(
>> >
>> > If you've opened a case with TAC, you may just have to wait
>> > for them to
>> > sort it out with you. I would press them to find out what
>> > that state of
>> > "wiccn" means.. If it's not a valid state, then it's coming
>> > from within
>> > the IOS code somewhere and they should be able to trace it
>> > and find
>> > where. Keep requesting escalations on your case until it
>> > gets to someone
>> > who knows/cares.
>> >
>> > You could try downgrading to a different IOS, unless you
>> > definitely need
>> > something in the special release you are using to make it
>> > work.
>> >
>> > If it's only tunnels from one provider, is it from all of
>> > their LAC, or
>> > a subset of their LAC ?
>> >
>> >
>> > regards,
>> > Tony.
>> >
>> >
>> >
>> > --- On Thu, 26/3/09, Andy Saykao <andy.saykao@staff.netspace.net.au>
>> > wrote:
>> >
>> > > From: Andy Saykao <andy.saykao@staff.netspace.net.au>
>> > > Subject: RE: [cisco-bba] VPDN session stuck in
>> > wiccn state ?
>> > > To: "Tony" <td_miles@yahoo.com>,
>> > cisco-bba@puck.nether.net
>> > > Date: Thursday, 26 March, 2009, 11:56 AM
>> > >
>> > > Hi Tony,
>> > >
>> > > Thank you for your reply.
>> > >
>> > > > One thing I can see from your output is that all
>> > of
>> > > the sessions with
>> > > this state are on the same tunnel (TunID: 21116). Do
>> > you have any
>> > > other sessions that are working on this same tunnel ?
>> > >
>> > > Yes there are valid sessions on the tunnel.
>> > >
>> > > > Is it happening across all of your LNS, or just
>> > one ?
>> > > When you
>> > > upgraded did you change IOS ? What IOS version are you
>> > running ? Have
>> > > you tried a different IOS ? Does a reboot fix the
>> > problem ?
>> > >
>> > > It's happening across all of our LNS's. We've been
>> > working extensively
>> >
>> > > with Cisco to get these LNS's up and running and using
>> > a special
>> > > engineering release from the 12.2(33) train. No, we
>> > have not tried a
>> > > different IOS given that we've been working with Cisco
>> > on getting this
>> >
>> > > far already.
>> > >
>> > > A reboot fixes the problem temporarily but when we
>> > arrive the next
>> > > day, there's a whole bunch of sessions waiting for us
>> > stuck in this
>> > > "wiccn"
>> > > state.
>> > >
>> > > > Did the LAC provider ("T" or "O" ?) have to
>> > change
>> > > anything on their
>> > > > end as part of the changes ? They will always say
>> > that
>> > > everything is
>> > > > ok, doesn't mean it is :)
>> > >
>> > > We terminate a few tunnels from a variety of Service
>> > Providers on
>> > > these LNS's and are currently only having issues with
>> > one provider
>> > > where we encounter this problem.
>> > >
>> > > Cheers.
>> > >
>> > > Andy
>> > >
>> >
>> >
>> >
>> >
>> >
>> > ______________________________________________________________________
>> > This email has been scanned by the MessageLabs Email
>> > Security System.
>> > For more information please visit http://www.messagelabs.com/email
>> > ______________________________________________________________________
>> >
>> > This email and any files transmitted with it are
>> > confidential and intended
>> > solely for the use of the individual or entity to whom
>> > they are addressed.
>> > Please notify the sender immediately by email if you have
>> > received this
>> > email by mistake and delete this email from your system.
>> > Please note that
>> > any views or opinions presented in this email are solely
>> > those of the
>> > author and do not necessarily represent those of the
>> > organisation.
>> > Finally, the recipient should check this email and any
>> > attachments for
>> > the presence of viruses. The organisation accepts no
>> > liability for any
>> > damage caused by any virus transmitted by this email.
>> >
>> >
>>
>>
>>
>> _______________________________________________
>> cisco-bba mailing list
>> cisco-bba@puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-bba
>>
>
>
>
> --
> Thanks
> Raghu
>
> ______________________________________________________________________
> This email has been scanned by the MessageLabs Email Security System.
> For more information please visit http://www.messagelabs.com/email
> ______________________________________________________________________
>
> This email and any files transmitted with it are confidential and intended
> solely for the use of the individual or entity to whom they are addressed.
> Please notify the sender immediately by email if you have received this
> email by mistake and delete this email from your system. Please note that
> any views or opinions presented in this email are solely those of the author
> and do not necessarily represent those of the organisation. Finally, the
> recipient should check this email and any attachments for the presence of
> viruses. The organisation accepts no liability for any damage caused by any
> virus transmitted by this email.
>



--
Thanks
Raghu
SAVE TREES..GO GREEN
Re: VPDN session stuck in wiccn state ? [ In reply to ]
For those interested, Cisco has been able to replicate and come up with
a fix for this issue.

When you do a 'sh vpdn tunnel all' on the ASR, you see this in the
tunnel output:

'Control channel Congestion Control is enabled'

On the 7201/7301 platform (which doesn't have the problem), you see:

'Control channel Congestion Control is disabled'

It's enabled by default on the ASR and Cisco believe this is causing the
issue.

To disable congestion control:

"no l2tp congestion-control"

Looks good so far...

--

Regards,

Andy Saykao
Systems Administrator
Netspace Online Systems Pty Ltd
Phone : 03 9811 0049
Mobile : 0401 422 406
Fax : 03 9811 0044
E-Mail : andy.saykao@staff.netspace.net.au
<mailto:andy.saykao@staff.netspace.net.au>

----

Hi Andy,
I think you need to configure lcp reneg always and clear the tunnel.
Even if this doesnt work, try setting ppp mrru in the template.
And even if this doesnt work raise case as suggested by Tony :)

Thanks
Raghu
SAVE TREES..GO GREEN

On Fri, Mar 27, 2009 at 5:24 AM, Andy Saykao <
andy.saykao[at]staff.netspace.net.au> wrote:

> Hi Raghu,
>
> Yes we are using lcp renegotiation in the VPDN config (see below).
>
> vpdn-group <Provider_Name>
> accept-dialin
> protocol l2tp
> virtual-template 2
> terminate-from hostname <Provider_Name>
> source-ip 203.17.x.x
> lcp renegotiation on-mismatch
> l2tp tunnel password <password>
> l2tp tunnel receive-window 100
> l2tp tunnel retransmit timeout min 2
> This is the same VPDN config we use for a few other Providers which we

> aren't seeing the same problem with.
>
> --
>
> Regards,
>
> Andy Saykao
> Systems Administrator
> Netspace Online Systems Pty Ltd
> Phone : 03 9811 0049
> Mobile : 0401 422 406
> Fax : 03 9811 0044
> E-Mail : andy.saykao[at]staff.netspace.net.au
>
>
> ------------------------------
> *From:* raghuram chary [mailto:raghujindia[at]gmail.com]
> *Sent:* Thursday, 26 March 2009 8:05 PM
> *To:* Andy Saykao
> *Cc:* cisco-bba[at]puck.nether.net; Tony
> *Subject:* Re: [cisco-bba] VPDN session stuck in wiccn state ?
>
> Hi Andy,
> WICCN is a WAIT ICCN state ,its one of the state in l2tp negotiations.

> Have you tried configuring lcp renegotiation ?
> Which router are you using?
> As you have shifted to more power LNS,I believe there is a
configuration
> problem.
>
> Thanks
> Raghu
> SAVE TREES..GO GREEN
>
> On Thu, Mar 26, 2009 at 7:13 AM, Tony <td_miles[at]yahoo.com> wrote:
>
>>
>> No problems, althought I don't think I actually helped any.
>>
>> I'd appreciate if you could let us (list) know what the solution is
when
>> you get it sorted.
>>
>>
>> Thanks,
>> Tony.
>>
>>
>> --- On Thu, 26/3/09, Andy Saykao
<andy.saykao[at]staff.netspace.net.au>
>> wrote:
>>
>> > From: Andy Saykao <andy.saykao[at]staff.netspace.net.au>
>> > Subject: RE: [cisco-bba] VPDN session stuck in wiccn state ?
>> > To: "Tony" <td_miles[at]yahoo.com>, cisco-bba[at]puck.nether.net
>> > Date: Thursday, 26 March, 2009, 12:24 PM
>> > Much appreciate your help Tony.
>> >
>> > Not sure if it's from all their LAC's or a subset, but will
>> > keep this in
>> > mind.
>> >
>> > Thanks.
>> >
>> >
>> > --
>> >
>> > Regards,
>> >
>> > Andy Saykao
>> > Systems Administrator
>> > Netspace Online Systems Pty Ltd
>> > Phone : 03 9811 0049
>> > Mobile : 0401 422 406
>> > Fax : 03 9811 0044
>> > E-Mail : andy.saykao[at]staff.netspace.net.au
>> >
>> > -----Original Message-----
>> > From: Tony [mailto:td_miles[at]yahoo.com]
>> >
>> > Sent: Thursday, 26 March 2009 12:18 PM
>> > To: cisco-bba[at]puck.nether.net;
>> > Andy Saykao
>> > Subject: RE: [cisco-bba] VPDN session stuck in wiccn state
>> > ?
>> >
>> >
>> > Hi Andy,
>> >
>> > I've pretty much out of ideas now then, sorry :(
>> >
>> > If you've opened a case with TAC, you may just have to wait
>> > for them to
>> > sort it out with you. I would press them to find out what
>> > that state of
>> > "wiccn" means.. If it's not a valid state, then it's coming
>> > from within
>> > the IOS code somewhere and they should be able to trace it
>> > and find
>> > where. Keep requesting escalations on your case until it
>> > gets to someone
>> > who knows/cares.
>> >
>> > You could try downgrading to a different IOS, unless you
>> > definitely need
>> > something in the special release you are using to make it
>> > work.
>> >
>> > If it's only tunnels from one provider, is it from all of
>> > their LAC, or
>> > a subset of their LAC ?
>> >
>> >
>> > regards,
>> > Tony.
>> >
>> >
>> >
>> > --- On Thu, 26/3/09, Andy Saykao
<andy.saykao[at]staff.netspace.net.au>
>> > wrote:
>> >
>> > > From: Andy Saykao <andy.saykao[at]staff.netspace.net.au>
>> > > Subject: RE: [cisco-bba] VPDN session stuck in
>> > wiccn state ?
>> > > To: "Tony" <td_miles[at]yahoo.com>,
>> > cisco-bba[at]puck.nether.net
>> > > Date: Thursday, 26 March, 2009, 11:56 AM
>> > >
>> > > Hi Tony,
>> > >
>> > > Thank you for your reply.
>> > >
>> > > > One thing I can see from your output is that all
>> > of
>> > > the sessions with
>> > > this state are on the same tunnel (TunID: 21116). Do
>> > you have any
>> > > other sessions that are working on this same tunnel ?
>> > >
>> > > Yes there are valid sessions on the tunnel.
>> > >
>> > > > Is it happening across all of your LNS, or just
>> > one ?
>> > > When you
>> > > upgraded did you change IOS ? What IOS version are you
>> > running ? Have
>> > > you tried a different IOS ? Does a reboot fix the
>> > problem ?
>> > >
>> > > It's happening across all of our LNS's. We've been
>> > working extensively
>> >
>> > > with Cisco to get these LNS's up and running and using
>> > a special
>> > > engineering release from the 12.2(33) train. No, we
>> > have not tried a
>> > > different IOS given that we've been working with Cisco
>> > on getting this
>> >
>> > > far already.
>> > >
>> > > A reboot fixes the problem temporarily but when we
>> > arrive the next
>> > > day, there's a whole bunch of sessions waiting for us
>> > stuck in this
>> > > "wiccn"
>> > > state.
>> > >
>> > > > Did the LAC provider ("T" or "O" ?) have to
>> > change
>> > > anything on their
>> > > > end as part of the changes ? They will always say
>> > that
>> > > everything is
>> > > > ok, doesn't mean it is :)
>> > >
>> > > We terminate a few tunnels from a variety of Service
>> > Providers on
>> > > these LNS's and are currently only having issues with
>> > one provider
>> > > where we encounter this problem.
>> > >
>> > > Cheers.
>> > >
>> > > Andy
>> > >
>> >
>> >
>> >
>> >
>> >
>> >
______________________________________________________________________
>> > This email has been scanned by the MessageLabs Email
>> > Security System.
>> > For more information please visit http://www.messagelabs.com/email
<http://www.messagelabs.com/email>
>> >
______________________________________________________________________
>> >
>> > This email and any files transmitted with it are
>> > confidential and intended
>> > solely for the use of the individual or entity to whom
>> > they are addressed.
>> > Please notify the sender immediately by email if you have
>> > received this
>> > email by mistake and delete this email from your system.
>> > Please note that
>> > any views or opinions presented in this email are solely
>> > those of the
>> > author and do not necessarily represent those of the
>> > organisation.
>> > Finally, the recipient should check this email and any
>> > attachments for
>> > the presence of viruses. The organisation accepts no
>> > liability for any
>> > damage caused by any virus transmitted by this email.
>> >
>> >
>>
>>
>>
>> _______________________________________________
>> cisco-bba mailing list
>> cisco-bba[at]puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-bba
<https://puck.nether.net/mailman/listinfo/cisco-bba>
>>
>
>
>
> --
> Thanks
> Raghu
>
> ______________________________________________________________________

> This email has been scanned by the MessageLabs Email Security System.
> For more information please visit http://www.messagelabs.com/email
<http://www.messagelabs.com/email>
> ______________________________________________________________________

>
> This email and any files transmitted with it are confidential and
intended
> solely for the use of the individual or entity to whom they are
addressed.
> Please notify the sender immediately by email if you have received
this
> email by mistake and delete this email from your system. Please note
that
> any views or opinions presented in this email are solely those of the
author
> and do not necessarily represent those of the organisation. Finally,
the
> recipient should check this email and any attachments for the presence
of
> viruses. The organisation accepts no liability for any damage caused
by any
> virus transmitted by this email.
>