Mailing List Archive

Ilir:



Is it just MSN Messenger traffic, or is it more things? Do all 400 users
get disconnected from MSN Messenger at the same time? If you look at just
one, what does a packet capture between the DSLAM and the 7200 and the 7200
and the internet show?



Frank



From: cisco-bba-bounces@puck.nether.net
[mailto:cisco-bba-bounces@puck.nether.net] On Behalf Of Ilir Nako
Sent: Thursday, July 24, 2008 9:11 AM
To: cisco-bba@puck.nether.net
Subject: [cisco-bba] windows messenger disconnects in periodic moments , in
pppoe connection



Hi



In our service provider we have about 400 users that are connected with
PPPoE connection .The connection is with adsl modems that terminate DSLAMs.

The pppoe is configured in 7200 router .



The problem is that the windows messenger disconect in periodic moment every
5 min for example.In this time they can navigate in internet .



The configuration of virtual-template is like this:



interface Virtual-Template161
mtu 1492
ip unnumbered GigabitEthernet0/2.161
ip nat inside
ip virtual-reassembly
peer default ip address pool pppoevlan161
ppp mtu adaptive
ppp authentication pap
ppp multilink





bba-group pppoe pppoevlan161
virtual-template 161
sessions per-vc limit 500
sessions per-mac limit 1
sessions per-vlan limit 1024

ip local pool pppoevlan161 192.168.160.5 192.168.161.253



Have somebody experienced this problem ?





Ilir Nako
ABCom Development Dept
Email: inako@abcom.al ; cel 0682152835
TIRANE - ALBANIA

Thank you Frank for your answer.

The customers inform at certain moments that the messenger disconnects in periodic intervals .While the internet connection is not interrupted .The help-desk office inform us for this issue.
Between the DSLAM and 7200 pass also traffic of customers that are not connected with pppoe .What type of traffic I have to sniff?

Do you think that are problems of packet size or not enough bandwidth ? The user are in three groups with 256 ,384 and 512 Kbps traffic policing
$Cisco-AVPair=ip:sub-policy-Out=<policy-name> from radius server to 7200


Ilir



----- Original Message -----
From: Frank Bulk - iNAME
To: 'Ilir Nako' ; cisco-bba@puck.nether.net
Sent: Saturday, July 26, 2008 7:47 AM
Subject: RE: [cisco-bba] windows messenger disconnects in periodic moments , in pppoe connection


-->
Ilir:



Is it just MSN Messenger traffic, or is it more things? Do all 400 users get disconnected from MSN Messenger at the same time? If you look at just one, what does a packet capture between the DSLAM and the 7200 and the 7200 and the internet show?



Frank



From: cisco-bba-bounces@puck.nether.net [mailto:cisco-bba-bounces@puck.nether.net] On Behalf Of Ilir Nako
Sent: Thursday, July 24, 2008 9:11 AM
To: cisco-bba@puck.nether.net
Subject: [cisco-bba] windows messenger disconnects in periodic moments , in pppoe connection



Hi



In our service provider we have about 400 users that are connected with PPPoE connection .The connection is with adsl modems that terminate DSLAMs.

The pppoe is configured in 7200 router .



The problem is that the windows messenger disconect in periodic moment every 5 min for example.In this time they can navigate in internet .



The configuration of virtual-template is like this:



interface Virtual-Template161
mtu 1492
ip unnumbered GigabitEthernet0/2.161
ip nat inside
ip virtual-reassembly
peer default ip address pool pppoevlan161
ppp mtu adaptive
ppp authentication pap
ppp multilink





bba-group pppoe pppoevlan161
virtual-template 161
sessions per-vc limit 500
sessions per-mac limit 1
sessions per-vlan limit 1024

ip local pool pppoevlan161 192.168.160.5 192.168.161.253



Have somebody experienced this problem ?





Ilir Nako
ABCom Development Dept
Email: inako@abcom.al ; cel 0682152835
TIRANE - ALBANIA



__________ Information from ESET NOD32 Antivirus, version of virus signature database 2888 (20080220) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com

Hi!

Do you use NAT? Maybe problem with session timeout? MSN Messanger send
keepalive messages?

On Sat, Jul 26, 2008 at 1:24 PM, Ilir Nako <inako@abcom.al> wrote:
> Thank you Frank for your answer.
>
> The customers inform at certain moments that the messenger disconnects in
> periodic intervals .While the internet connection is not interrupted .The
> help-desk office inform us for this issue.
> Between the DSLAM and 7200 pass also traffic of customers that are not
> connected with pppoe .What type of traffic I have to sniff?
>
> Do you think that are problems of packet size or not enough bandwidth ? The
> user are in three groups with 256 ,384 and 512 Kbps traffic policing
> $Cisco-AVPair=ip:sub-policy-Out=<policy-name> from radius server to 7200
>
>
> Ilir

--
WBR, Yuri
_______________________________________________
cisco-bba mailing list
cisco-bba@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-bba

Yes , we use NAT for this customers

ip nat translation tcp-timeout 30
ip nat translation udp-timeout 30
ip nat translation finrst-timeout 15
ip nat translation syn-timeout 15
ip nat translation dns-timeout 15
ip nat translation icmp-timeout 15
ip nat translation max-entries all-host 200


Regards

Ilir
----- Original Message -----
From: "Yuri Schefer" <shefys@gmail.com>
To: "Ilir Nako" <inako@abcom.al>
Cc: <cisco-bba@puck.nether.net>
Sent: Saturday, July 26, 2008 2:40 PM
Subject: Re: [cisco-bba] windows messenger disconnects in periodic moments ,
in pppoe connection


> Hi!
>
> Do you use NAT? Maybe problem with session timeout? MSN Messanger send
> keepalive messages?
>
> On Sat, Jul 26, 2008 at 1:24 PM, Ilir Nako <inako@abcom.al> wrote:
>> Thank you Frank for your answer.
>>
>> The customers inform at certain moments that the messenger disconnects in
>> periodic intervals .While the internet connection is not interrupted .The
>> help-desk office inform us for this issue.
>> Between the DSLAM and 7200 pass also traffic of customers that are not
>> connected with pppoe .What type of traffic I have to sniff?
>>
>> Do you think that are problems of packet size or not enough bandwidth ?
>> The
>> user are in three groups with 256 ,384 and 512 Kbps traffic policing
>> $Cisco-AVPair=ip:sub-policy-Out=<policy-name> from radius server to 7200
>>
>>
>> Ilir
>
> --
> WBR, Yuri
>
> __________ Information from ESET NOD32 Antivirus, version of virus
> signature database 2888 (20080220) __________
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
>

_______________________________________________
cisco-bba mailing list
cisco-bba@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-bba

Good thought, Yuri.

Ilir, just follow this URL:
http://www.google.com/search?q=MSN+Messenger+NAT+disconnects
to get more information on this problem and some solutions.

Frank

-----Original Message-----
From: cisco-bba-bounces@puck.nether.net
[mailto:cisco-bba-bounces@puck.nether.net] On Behalf Of Ilir Nako
Sent: Saturday, July 26, 2008 7:45 AM
To: Yuri Schefer; cisco-bba@puck.nether.net
Subject: Re: [cisco-bba] windows messenger disconnects in periodic moments ,
in pppoe connection

Yes , we use NAT for this customers

ip nat translation tcp-timeout 30
ip nat translation udp-timeout 30
ip nat translation finrst-timeout 15
ip nat translation syn-timeout 15
ip nat translation dns-timeout 15
ip nat translation icmp-timeout 15
ip nat translation max-entries all-host 200


Regards

Ilir
----- Original Message -----
From: "Yuri Schefer" <shefys@gmail.com>
To: "Ilir Nako" <inako@abcom.al>
Cc: <cisco-bba@puck.nether.net>
Sent: Saturday, July 26, 2008 2:40 PM
Subject: Re: [cisco-bba] windows messenger disconnects in periodic moments ,
in pppoe connection


> Hi!
>
> Do you use NAT? Maybe problem with session timeout? MSN Messanger send
> keepalive messages?
>
> On Sat, Jul 26, 2008 at 1:24 PM, Ilir Nako <inako@abcom.al> wrote:
>> Thank you Frank for your answer.
>>
>> The customers inform at certain moments that the messenger disconnects in
>> periodic intervals .While the internet connection is not interrupted .The
>> help-desk office inform us for this issue.
>> Between the DSLAM and 7200 pass also traffic of customers that are not
>> connected with pppoe .What type of traffic I have to sniff?
>>
>> Do you think that are problems of packet size or not enough bandwidth ?
>> The
>> user are in three groups with 256 ,384 and 512 Kbps traffic policing
>> $Cisco-AVPair=ip:sub-policy-Out=<policy-name> from radius server to 7200
>>
>>
>> Ilir
>
> --
> WBR, Yuri
>
> __________ Information from ESET NOD32 Antivirus, version of virus
> signature database 2888 (20080220) __________
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
>

_______________________________________________
cisco-bba mailing list
cisco-bba@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-bba

_______________________________________________
cisco-bba mailing list
cisco-bba@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-bba

On Jul 24, 2008, at 10:11 AM, Ilir Nako wrote:
> interface Virtual-Template161
> mtu 1492
> ip unnumbered GigabitEthernet0/2.161
> ip nat inside
> ip virtual-reassembly
> peer default ip address pool pppoevlan161
> ppp mtu adaptive
> ppp authentication pap
> ppp multilink


Lose "ip virtual-reassembly". That's something you want to limit on
to CPE devices or symmetric connections, not on a bunch of individual
PPP terminations. Not to mention, if you're doing this for a few
hundred PPPoX sessions, it's probably a considerable performance hit.

Also, are you doing multilink? If not, you can lose that as well..

--
Robert Blayzor, BOFH
INOC, LLC
rblayzor@inoc.net
http://www.inoc.net/~rblayzor/



_______________________________________________
cisco-bba mailing list
cisco-bba@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-bba

Look what is the output of one virtual-access parametres:

7200pppoe#sh interfaces virtual-access 2.36
Virtual-Access2.36 is up, line protocol is up
Hardware is Virtual Access interface
Interface is unnumbered. Using address of GigabitEthernet0/2.161 (192.168.160.1)
MTU 1492 bytes, BW 100000 Kbit, DLY 100000 usec,
reliability 255/255, txload 29/255, rxload 25/255
Encapsulation PPP, LCP Open
Open: IPCP
PPPoE vaccess, cloned from Virtual-Template161
Vaccess status 0x0
Keepalive set (10 sec)
63 packets input, 2060 bytes
44 packets output, 559 bytes
Time to interface disconnect: absolute 04:56:48, idle 03:16:48
Last clearing of "show interface" counters never

7200pppoe#sh interfaces virtual-access 2.36
Virtual-Access2.36 is up, line protocol is up
Hardware is Virtual Access interface
Interface is unnumbered. Using address of GigabitEthernet0/2.161 (192.168.160.1)
MTU 1492 bytes, BW 100000 Kbit, DLY 100000 usec,
reliability 255/255, txload 29/255, rxload 25/255
Encapsulation PPP, LCP Open
Open: IPCP
PPPoE vaccess, cloned from Virtual-Template161
Vaccess status 0x0
Keepalive set (10 sec)
63 packets input, 2060 bytes
44 packets output, 559 bytes
Time to interface disconnect: absolute 04:56:47, idle 03:16:47


Here I think must be the problem .

This absolute timer is directed by radius server .

ilir





----- Original Message -----
From: "Robert Blayzor" <rblayzor.bulk@inoc.net>
To: "Ilir Nako" <inako@abcom.al>
Cc: <cisco-bba@puck.nether.net>
Sent: Saturday, July 26, 2008 6:21 PM
Subject: Re: [cisco-bba] windows messenger disconnects in periodic moments , in pppoe connection


> On Jul 24, 2008, at 10:11 AM, Ilir Nako wrote:
>> interface Virtual-Template161
>> mtu 1492
>> ip unnumbered GigabitEthernet0/2.161
>> ip nat inside
>> ip virtual-reassembly
>> peer default ip address pool pppoevlan161
>> ppp mtu adaptive
>> ppp authentication pap
>> ppp multilink
>
>
> Lose "ip virtual-reassembly". That's something you want to limit on
> to CPE devices or symmetric connections, not on a bunch of individual
> PPP terminations. Not to mention, if you're doing this for a few
> hundred PPPoX sessions, it's probably a considerable performance hit.
>
> Also, are you doing multilink? If not, you can lose that as well..
>
> --
> Robert Blayzor, BOFH
> INOC, LLC
> rblayzor@inoc.net
> http://www.inoc.net/~rblayzor/
>
>
>
> __________ Information from ESET NOD32 Antivirus, version of virus signature database 2888 (20080220) __________
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
>