Mailing List Archive

Vedr.: Re: Problems with multilink PPP/ISDN
Hi again,

> At 11:47 AM 1/9/2004 +0100, Regnar Bang Lyngsø wrote:
>
> Each PPP Control Protocol packet has an ID associated with it, along with
> the different options being requested; the response (ACK) to this packet
> must have the same ID and the options can't be reordered or modified in
> any way. If this is not the case, we will print out this message.
>
> It typically indicates some sort of delay or processing error on the
> part of the PPP peer.
>
> >00:13:14: %LINK-3-UPDOWN: Interface Serial3/0:0, changed state to up
> >00:13:15: %LINK-3-UPDOWN: Interface Serial3/0:1, changed state to up
> >00:13:15: %ISDN-6-CONNECT: Interface Serial3/0:0 is now connected to 443
> >00:13:17: Se3/0:0 LCP: Ignoring bad ACK!
>
> <debug ppp neg> would indicate what's happening here, but I suspect
> the clients are having issues.
>

This is the output I get from debug ppp nego (tried with CHAP and
MS-CHAP-V2 with similar results):

2d22h: %LINK-3-UPDOWN: Interface Serial3/0:0, changed state to up
2d22h: %LINK-3-UPDOWN: Interface Serial3/0:1, changed state to up
2d22h: %ISDN-6-CONNECT: Interface Serial3/0:0 is now connected to 443
2d22h: Se3/0:0 PPP: Using dialer call direction
2d22h: Se3/0:0 PPP: Treating connection as a callin
2d22h: Se3/0:0 PPP: Phase is ESTABLISHING, Passive Open
2d22h: Se3/0:0 LCP: State is Listen
2d22h: Se3/0:0 LCP: I CONFREQ [Listen] id 1 len 55
2d22h: Se3/0:0 LCP: ACCM 0x00000000 (0x020600000000)
2d22h: Se3/0:0 LCP: MagicNumber 0x07EE7EED (0x050607EE7EED)
2d22h: Se3/0:0 LCP: PFC (0x0702)
2d22h: Se3/0:0 LCP: MRRU 1614 (0x1104064E)
2d22h: Se3/0:0 LCP: EndpointDisc 1 Local
2d22h: Se3/0:0 LCP: (0x131701CF46FA23EE184422AAAD316E88)
2d22h: Se3/0:0 LCP: (0x7D5B9A00000000)
2d22h: Se3/0:0 LCP: MRRU 1500 (0x110405DC)
2d22h: Se3/0:0 LCP: EndpointDisc 1 Local (0x130601CADFD7)
2d22h: Se3/0:0 LCP: O CONFREQ [Listen] id 30 len 36
2d22h: Se3/0:0 LCP: AuthProto CHAP (0x0305C22305)
2d22h: Se3/0:0 LCP: MagicNumber 0x1F9D41A3 (0x05061F9D41A3)
2d22h: Se3/0:0 LCP: MRRU 1524 (0x110405F4)
2d22h: Se3/0:0 LCP: EndpointDisc 1 ao-srv01-dia01
2d22h: Se3/0:0 LCP: (0x131101616F2D73727630312D64696130)
2d22h: Se3/0:0 LCP: (0x31)
2d22h: Se3/0:0 LCP: O CONFACK [Listen] id 1 len 55
2d22h: Se3/0:0 LCP: ACCM 0x00000000 (0x020600000000)
2d22h: Se3/0:0 LCP: MagicNumber 0x07EE7EED (0x050607EE7EED)
2d22h: Se3/0:0 LCP: PFC (0x0702)
2d22h: Se3/0:0 LCP: MRRU 1614 (0x1104064E)
2d22h: Se3/0:0 LCP: EndpointDisc 1 Local
2d22h: Se3/0:0 LCP: (0x131701CF46FA23EE184422AAAD316E88)
2d22h: Se3/0:0 LCP: (0x7D5B9A00000000)
2d22h: Se3/0:0 LCP: MRRU 1500 (0x110405DC)
2d22h: Se3/0:0 LCP: EndpointDisc 1 Local (0x130601CADFD7)
2d22h: Se3/0:0 LCP: I CONFACK [ACKsent] id 30 len 25
2d22h: Se3/0:0 LCP: AuthProto CHAP (0x0305C22305)
2d22h: Se3/0:0 LCP: MagicNumber 0x1F9D41A3 (0x05061F9D41A3)
2d22h: Se3/0:0 LCP: MRRU 1500 (0x110405DC)
2d22h: Se3/0:0 LCP: EndpointDisc 1 Local (0x130601CADFD7)
2d22h: Se3/0:0 LCP: Ignoring bad ACK!
2d22h: Se3/0:0 LCP: I CONFREQ [REQsent] id 2 len 55
2d22h: Se3/0:0 LCP: ACCM 0x00000000 (0x020600000000)
2d22h: Se3/0:0 LCP: MagicNumber 0x07EE7EED (0x050607EE7EED)
2d22h: Se3/0:0 LCP: PFC (0x0702)
2d22h: Se3/0:0 LCP: MRRU 1614 (0x1104064E)
2d22h: Se3/0:0 LCP: EndpointDisc 1 Local
2d22h: Se3/0:0 LCP: (0x131701CF46FA23EE184422AAAD316E88)
2d22h: Se3/0:0 LCP: (0x7D5B9A00000000)
2d22h: Se3/0:0 LCP: MRRU 1500 (0x110405DC)
2d22h: Se3/0:0 LCP: EndpointDisc 1 Local (0x130601CADFD7)
2d22h: Se3/0:0 LCP: O CONFACK [REQsent] id 2 len 55
2d22h: Se3/0:0 LCP: ACCM 0x00000000 (0x020600000000)
2d22h: Se3/0:0 LCP: MagicNumber 0x07EE7EED (0x050607EE7EED)
2d22h: Se3/0:0 LCP: PFC (0x0702)
2d22h: Se3/0:0 LCP: MRRU 1614 (0x1104064E)
2d22h: Se3/0:0 LCP: EndpointDisc 1 Local
2d22h: Se3/0:0 LCP: (0x131701CF46FA23EE184422AAAD316E88)
2d22h: Se3/0:0 LCP: (0x7D5B9A00000000)
2d22h: Se3/0:0 LCP: MRRU 1500 (0x110405DC)
2d22h: Se3/0:0 LCP: EndpointDisc 1 Local (0x130601CADFD7)
2d22h: Se3/0:0 LCP: TIMEout: State ACKsent
2d22h: Se3/0:0 LCP: O CONFREQ [ACKsent] id 31 len 36
2d22h: Se3/0:0 LCP: AuthProto CHAP (0x0305C22305)
2d22h: Se3/0:0 LCP: MagicNumber 0x1F9D41A3 (0x05061F9D41A3)
2d22h: Se3/0:0 LCP: MRRU 1524 (0x110405F4)
2d22h: Se3/0:0 LCP: EndpointDisc 1 ao-srv01-dia01
2d22h: Se3/0:0 LCP: (0x131101616F2D73727630312D64696130)
2d22h: Se3/0:0 LCP: (0x31)
2d22h: Se3/0:0 LCP: I CONFACK [ACKsent] id 31 len 36
2d22h: Se3/0:0 LCP: AuthProto CHAP (0x0305C22305)
2d22h: Se3/0:0 LCP: MagicNumber 0x1F9D41A3 (0x05061F9D41A3)
2d22h: Se3/0:0 LCP: MRRU 1524 (0x110405F4)
2d22h: Se3/0:0 LCP: EndpointDisc 1 ao-srv01-dia01
2d22h: Se3/0:0 LCP: (0x131101616F2D73727630312D64696130)
2d22h: Se3/0:0 LCP: (0x31)
2d22h: Se3/0:0 LCP: State is Open
2d22h: Se3/0:0 PPP: Phase is AUTHENTICATING, by this end
2d22h: Se3/0:0 CHAP: O CHALLENGE id 13 len 35 from "ao-srv01-dia01"
2d22h: %ISDN-6-CONNECT: Interface Serial3/0:1 is now connected to 443
2d22h: Se3/0:0 LCP: I CONFREQ [Open] id 3 len 55
2d22h: Se3/0:0 LCP: ACCM 0x00000000 (0x020600000000)
2d22h: Se3/0:0 LCP: MagicNumber 0x07EE7EED (0x050607EE7EED)
2d22h: Se3/0:0 LCP: PFC (0x0702)
2d22h: Se3/0:0 LCP: MRRU 1614 (0x1104064E)
2d22h: Se3/0:0 LCP: EndpointDisc 1 Local
2d22h: Se3/0:0 LCP: (0x131701CF46FA23EE184422AAAD316E88)
2d22h: Se3/0:0 LCP: (0x7D5B9A00000000)
2d22h: Se3/0:0 LCP: MRRU 1500 (0x110405DC)
2d22h: Se3/0:0 LCP: EndpointDisc 1 Local (0x130601CADFD7)
2d22h: Se3/0:0 PPP: Sending Acct Event[Reneg] id[11C]
2d22h: Se3/0:0 PPP: Phase is TERMINATING
2d22h: Se3/0:0 PPP: Phase is ESTABLISHING
2d22h: Se3/0:0 LCP: O CONFREQ [Open] id 32 len 36
2d22h: Se3/0:0 LCP: AuthProto CHAP (0x0305C22305)
2d22h: Se3/0:0 LCP: MagicNumber 0x1F9D5515 (0x05061F9D5515)
2d22h: Se3/0:0 LCP: MRRU 1524 (0x110405F4)
2d22h: Se3/0:0 LCP: EndpointDisc 1 ao-srv01-dia01
2d22h: Se3/0:0 LCP: (0x131101616F2D73727630312D64696130)
2d22h: Se3/0:0 LCP: (0x31)
2d22h: Se3/0:0 LCP: O CONFACK [Open] id 3 len 55
2d22h: Se3/0:0 LCP: ACCM 0x00000000 (0x020600000000)
2d22h: Se3/0:0 LCP: MagicNumber 0x07EE7EED (0x050607EE7EED)
2d22h: Se3/0:0 LCP: PFC (0x0702)
2d22h: Se3/0:0 LCP: MRRU 1614 (0x1104064E)
2d22h: Se3/0:0 LCP: EndpointDisc 1 Local
2d22h: Se3/0:0 LCP: (0x131701CF46FA23EE184422AAAD316E88)
2d22h: Se3/0:0 LCP: (0x7D5B9A00000000)
2d22h: Se3/0:0 LCP: MRRU 1500 (0x110405DC)
2d22h: Se3/0:0 LCP: EndpointDisc 1 Local (0x130601CADFD7)
2d22h: Se3/0:0 LCP: I CONFACK [ACKsent] id 32 len 25
2d22h: Se3/0:0 LCP: AuthProto CHAP (0x0305C22305)
2d22h: Se3/0:0 LCP: MagicNumber 0x1F9D5515 (0x05061F9D5515)
2d22h: Se3/0:0 LCP: MRRU 1500 (0x110405DC)
2d22h: Se3/0:0 LCP: EndpointDisc 1 Local (0x130601CADFD7)
2d22h: Se3/0:0 LCP: Ignoring bad ACK!
2d22h: Se3/0:0 LCP: TIMEout: State REQsent
2d22h: Se3/0:0 LCP: O CONFREQ [REQsent] id 33 len 36
2d22h: Se3/0:0 LCP: AuthProto CHAP (0x0305C22305)
2d22h: Se3/0:0 LCP: MagicNumber 0x1F9D5515 (0x05061F9D5515)
2d22h: Se3/0:0 LCP: MRRU 1524 (0x110405F4)
2d22h: Se3/0:0 LCP: EndpointDisc 1 ao-srv01-dia01
2d22h: Se3/0:0 LCP: (0x131101616F2D73727630312D64696130)
2d22h: Se3/0:0 LCP: (0x31)
2d22h: Se3/0:0 LCP: I CONFACK [REQsent] id 33 len 36
2d22h: Se3/0:0 LCP: AuthProto CHAP (0x0305C22305)
2d22h: Se3/0:0 LCP: MagicNumber 0x1F9D5515 (0x05061F9D5515)
2d22h: Se3/0:0 LCP: MRRU 1524 (0x110405F4)
2d22h: Se3/0:0 LCP: EndpointDisc 1 ao-srv01-dia01
2d22h: Se3/0:0 LCP: (0x131101616F2D73727630312D64696130)
2d22h: Se3/0:0 LCP: (0x31)
2d22h: %ISDN-6-DISCONNECT: Interface Serial3/0:1 disconnected from 443 ,
call l
asted 10 seconds
2d22h: %LINK-3-UPDOWN: Interface Serial3/0:1, changed state to down
2d22h: %ISDN-6-DISCONNECT: Interface Serial3/0:0 disconnected from 443
cadfd7,
call lasted 10 seconds
2d22h: %LINK-3-UPDOWN: Interface Serial3/0:0, changed state to down
2d22h: Se3/0:0 PPP: Sending Acct Event[Down] id[11C]
2d22h: Se3/0:0 LCP: State is Closed
2d22h: Se3/0:0 PPP: Phase is DOWN

Regards
--
Regnar Bang Lyngsø, Network Administrator
Aarhus United Denmark
M.P. Bruuns Gade 27, DK-8100 Århus C, Denmark
Email: mailto:regnar.lyngso@aarhusunited.com
Phone: +45 87 30 61 65 Mobile: +45 40 45 08 89
RE: Vedr.: Re: Problems with multilink PPP/ISDN [ In reply to ]
It looks like one end is sending an ack with a different MRRU to a request.

This is legal only if the packet is a CONFNACK which means negotiate, a
CONFACK means or should mean 'I accept these parameters', so the other end
is rightly saying it's a bad ACK.

You'll see it where it send out a CONFREQ for 1524 and the matching CONFACK
has changed it to 1500.

Later the MRRU's match and the link comes up.

Darren Ward
CCIE # 8245

-----Original Message-----

-- SNIP -- Mismatched MRRU's

2d22h: Se3/0:0 LCP: O CONFREQ [Listen] id 30 len 36
2d22h: Se3/0:0 LCP: AuthProto CHAP (0x0305C22305)
2d22h: Se3/0:0 LCP: MagicNumber 0x1F9D41A3 (0x05061F9D41A3)
2d22h: Se3/0:0 LCP: MRRU 1524 (0x110405F4)
2d22h: Se3/0:0 LCP: EndpointDisc 1 ao-srv01-dia01
2d22h: Se3/0:0 LCP: (0x131101616F2D73727630312D64696130)
2d22h: Se3/0:0 LCP: (0x31)
... snip...
2d22h: Se3/0:0 LCP: I CONFACK [ACKsent] id 30 len 25
2d22h: Se3/0:0 LCP: AuthProto CHAP (0x0305C22305)
2d22h: Se3/0:0 LCP: MagicNumber 0x1F9D41A3 (0x05061F9D41A3)
2d22h: Se3/0:0 LCP: MRRU 1500 (0x110405DC)
2d22h: Se3/0:0 LCP: EndpointDisc 1 Local (0x130601CADFD7)
2d22h: Se3/0:0 LCP: Ignoring bad ACK!

-- SNIP -- Later we request 1524 and get back 1524 and link progresses to up
and AAA

2d22h: Se3/0:0 LCP: O CONFREQ [ACKsent] id 31 len 36
2d22h: Se3/0:0 LCP: AuthProto CHAP (0x0305C22305)
2d22h: Se3/0:0 LCP: MagicNumber 0x1F9D41A3 (0x05061F9D41A3)
2d22h: Se3/0:0 LCP: MRRU 1524 (0x110405F4)
2d22h: Se3/0:0 LCP: EndpointDisc 1 ao-srv01-dia01
2d22h: Se3/0:0 LCP: (0x131101616F2D73727630312D64696130)
2d22h: Se3/0:0 LCP: (0x31)
2d22h: Se3/0:0 LCP: I CONFACK [ACKsent] id 31 len 36
2d22h: Se3/0:0 LCP: AuthProto CHAP (0x0305C22305)
2d22h: Se3/0:0 LCP: MagicNumber 0x1F9D41A3 (0x05061F9D41A3)
2d22h: Se3/0:0 LCP: MRRU 1524 (0x110405F4)
2d22h: Se3/0:0 LCP: EndpointDisc 1 ao-srv01-dia01
2d22h: Se3/0:0 LCP: (0x131101616F2D73727630312D64696130)
2d22h: Se3/0:0 LCP: (0x31)
2d22h: Se3/0:0 LCP: State is Open

-- SNIP --
RE: Vedr.: Re: Problems with multilink PPP/ISDN [ In reply to ]
At 08:28 PM 1/12/2004 +1100, Darren Ward wrote:
>It looks like one end is sending an ack with a different MRRU to a request.

It's also sending back a different address associated with the
Endpoint Discriminator class "local":

2d22h: Se3/0:0 LCP: O CONFREQ [Listen] id 30 len 36
2d22h: Se3/0:0 LCP: MRRU 1524 (0x110405F4)
2d22h: Se3/0:0 LCP: EndpointDisc 1 ao-srv01-dia01
2d22h: Se3/0:0 LCP: (0x131101616F2D73727630312D64696130)
2d22h: Se3/0:0 LCP: (0x31)
... snip...
2d22h: Se3/0:0 LCP: I CONFACK [ACKsent] id 30 len 25
2d22h: Se3/0:0 LCP: MRRU 1500 (0x110405DC)
2d22h: Se3/0:0 LCP: EndpointDisc 1 Local (0x130601CADFD7)

>This is legal only if the packet is a CONFNACK which means negotiate, a
>CONFACK means or should mean 'I accept these parameters', so the other end
>is rightly saying it's a bad ACK.

Right; the CONFACK should be IDENTICAL to the CONFREQ.

>You'll see it where it send out a CONFREQ for 1524 and the matching CONFACK
>has changed it to 1500.
>
>Later the MRRU's match and the link comes up.

Only momentarily; then the remote sends another LCP CONFREQ, and we
start all over, only to eventually fail.

Your remote ISDN modem (which is likely handling the MPPP - I think
if you disable MPPP on the cisco, things might connect fine) is broke.

mark


>Darren Ward
>CCIE # 8245
>
>-----Original Message-----
>
>-- SNIP -- Mismatched MRRU's
>
>2d22h: Se3/0:0 LCP: O CONFREQ [Listen] id 30 len 36
>2d22h: Se3/0:0 LCP: AuthProto CHAP (0x0305C22305)
>2d22h: Se3/0:0 LCP: MagicNumber 0x1F9D41A3 (0x05061F9D41A3)
>2d22h: Se3/0:0 LCP: MRRU 1524 (0x110405F4)
>2d22h: Se3/0:0 LCP: EndpointDisc 1 ao-srv01-dia01
>2d22h: Se3/0:0 LCP: (0x131101616F2D73727630312D64696130)
>2d22h: Se3/0:0 LCP: (0x31)
>... snip...
>2d22h: Se3/0:0 LCP: I CONFACK [ACKsent] id 30 len 25
>2d22h: Se3/0:0 LCP: AuthProto CHAP (0x0305C22305)
>2d22h: Se3/0:0 LCP: MagicNumber 0x1F9D41A3 (0x05061F9D41A3)
>2d22h: Se3/0:0 LCP: MRRU 1500 (0x110405DC)
>2d22h: Se3/0:0 LCP: EndpointDisc 1 Local (0x130601CADFD7)
>2d22h: Se3/0:0 LCP: Ignoring bad ACK!
>
>-- SNIP -- Later we request 1524 and get back 1524 and link progresses to up
>and AAA
>
>2d22h: Se3/0:0 LCP: O CONFREQ [ACKsent] id 31 len 36
>2d22h: Se3/0:0 LCP: AuthProto CHAP (0x0305C22305)
>2d22h: Se3/0:0 LCP: MagicNumber 0x1F9D41A3 (0x05061F9D41A3)
>2d22h: Se3/0:0 LCP: MRRU 1524 (0x110405F4)
>2d22h: Se3/0:0 LCP: EndpointDisc 1 ao-srv01-dia01
>2d22h: Se3/0:0 LCP: (0x131101616F2D73727630312D64696130)
>2d22h: Se3/0:0 LCP: (0x31)
>2d22h: Se3/0:0 LCP: I CONFACK [ACKsent] id 31 len 36
>2d22h: Se3/0:0 LCP: AuthProto CHAP (0x0305C22305)
>2d22h: Se3/0:0 LCP: MagicNumber 0x1F9D41A3 (0x05061F9D41A3)
>2d22h: Se3/0:0 LCP: MRRU 1524 (0x110405F4)
>2d22h: Se3/0:0 LCP: EndpointDisc 1 ao-srv01-dia01
>2d22h: Se3/0:0 LCP: (0x131101616F2D73727630312D64696130)
>2d22h: Se3/0:0 LCP: (0x31)
>2d22h: Se3/0:0 LCP: State is Open
>
>-- SNIP --
>
>_______________________________________________
>cisco-nas mailing list
>cisco-nas@puck.nether.net
>https://puck.nether.net/mailman/listinfo/cisco-nas