Solved

ASA 5510  pppoe on bt infinity fails

Posted on 2012-04-13
13
2,152 Views
Last Modified: 2013-11-12
Hi
I have a BT infinity line I am trying to connect to an asa 5510. The line does not appear to be initialising. Details below, anyone any ideas?

Config :-

interface Ethernet0/3
 nameif Infinity
 security-level 0
 pppoe client vpdn group Infinity
 ip address pppoe setroute

vpdn group Infinity request dialout pppoe
vpdn group Infinity localname C974463@hg70.btclick.com
vpdn group Infinity ppp authentication chap
vpdn username C974463@hg70.btclick.com password ***** store-local


Output from debug pppoe

PPPoE: send_padt:(Snd) Dest:0013.c482.3439 Src:0013.c482.3439 Type:0x8863=PPPoE-Discovery
PPPoE: Ver:1 Type:1 Code:A7=PADT Sess:345 Len:0
PPPoE: send_padi:(Snd) Dest:ffff.ffff.ffff Src:0013.c482.3439 Type:0x8863=PPPoE-Discovery
PPPoE: Ver:1 Type:1 Code:09=PADI Sess:0 Len:12
PPPoE: Type:0101:SVCNAME-Service Name Len:0
PPPoE: Type:0103:HOSTUNIQ-Host Unique Tag Len:4
PPPoE: 00000008
PPPoE: PPPoE:(Rcv) Dest:0013.c482.3439 Src:0030.8800.0006 Type:0x8863=PPPoE-Discovery
PPPoE: Ver:1 Type:1 Code:07=PADO Sess:0 Len:46
PPPoE: Type:0103:HOSTUNIQ-Host Unique Tag Len:4
PPPoE: 00000008
PPPoE: Type:0102:ACNAME-AC Name Len:30
PPPoE: bras-red6.bm-th-B2224060701971

PPPoE: Type:0101:SVCNAME-Service Name Len:0
PPPoE: PADO

PPPoE: send_padr:(Snd) Dest:0030.8800.0006 Src:0013.c482.3439 Type:0x8863=PPPoE-Discovery
PPPoE: Ver:1 Type:1 Code:19=PADR Sess:0 Len:46
PPPoE: Type:0103:HOSTUNIQ-Host Unique Tag Len:4
PPPoE: 00000008
PPPoE: Type:0102:ACNAME-AC Name Len:30
PPPoE: bras-red6.bm-th-B2224060701971

PPPoE: Type:0101:SVCNAME-Service Name Len:0
PPPoE: PPPoE:(Rcv) Dest:0013.c482.3439 Src:0030.8800.0006 Type:0x8863=PPPoE-Discovery
PPPoE: Ver:1 Type:1 Code:65=PADS Sess:2922 Len:46
PPPoE: Type:0103:HOSTUNIQ-Host Unique Tag Len:4
PPPoE: 00000008
PPPoE: Type:0101:SVCNAME-Service Name Len:0
PPPoE: Type:0102:ACNAME-AC Name Len:30
PPPoE: bras-red6.bm-th-B2224060701971

PPPoE: PADS

PPPoE: IN PADS from PPPoE tunnel

PPPoE: Opening PPP link and starting negotiations.

PPPoE: Shutting down client session

PPPoE: send_padt:(Snd) Dest:0013.c482.3439 Src:0013.c482.3439 Type:0x8863=PPPoE-Discovery
PPPoE: Ver:1 Type:1 Code:A7=PADT Sess:2922 Len:0
0
Comment
Question by:jrb139
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 8
  • 5
13 Comments
 
LVL 15

Expert Comment

by:Perarduaadastra
ID: 37841779
How are you connecting the BT Infinity to the ASA?
0
 

Author Comment

by:jrb139
ID: 37841859
Directly to the bt white box (modem), not using the homehub. I have been testing the BT infinity line connected like this but to a cisco 1841 and it works fine so I know I have all the credentials correct and that the line works fine.

It's just connecting via asa that seems to be failing!
0
 
LVL 15

Expert Comment

by:Perarduaadastra
ID: 37841873
The report seems to indicate that it all falls apart as soon as negotiations between the two ends of the connections start.

Have you tried different authentication methods? I know that in theory what works for the 1841 should work for the ASA, but they are very different bits of kit...
0
Retailers - Is your network secure?

With the prevalence of social media & networking tools, for retailers, reputation is critical. Have you considered the impact your network security could have in your customer's experience? Learn more in our Retail Security Resource Kit Today!

 

Author Comment

by:jrb139
ID: 37841876
Do you mean like pap?
0
 
LVL 15

Expert Comment

by:Perarduaadastra
ID: 37841908
Yes; that's the only other one, really, as EAP is primarily used in wireless scenarios. However, PAP does seem unlikely as the password is transmitted in clear text - not a great idea!

Another thought has occurred to me; can the term "negotiations" refer to the link characteristics as well? If link speed or MTU size can't be agreed by the endpoints, that won't help much...
0
 
LVL 15

Expert Comment

by:Perarduaadastra
ID: 37841935
I've just had a look at the connection of one of my clients who uses a completely different device for his connection, and that device provides an option for auto-negotiation of the link; does the ASA allow you to do this?
0
 

Author Comment

by:jrb139
ID: 37841990
The Only Auto things available are the speed and duplex.
I have tried fixing these at 100/full and auto. didn't seem to make any difference.
0
 
LVL 15

Expert Comment

by:Perarduaadastra
ID: 37842019
I've just had a quick chat with my router, which is connected to BT's Infinity modem; the port speed is set to autosense, and the MTU size is default, which the greyed-out Custom field is showing as 1492 bytes.

I have found in the past that connectivity can be broken by specifying the wrong MTU size in the router/gateway/whatever appliance, so it's worth experimenting with at least the common values, unless BT can tell you definitively what it should be.
0
 
LVL 15

Expert Comment

by:Perarduaadastra
ID: 37842026
I'm away from my computer for a few hours now, so I hope that someone else can get you up and running, even if it wasn't me!
0
 
LVL 15

Accepted Solution

by:
Perarduaadastra earned 500 total points
ID: 37844139
Back again.

Another thought:

Have you got multiple public IP addresses on this interface? If so, such a configuration may need more expertise than I have.

It might be helpful if you re-posted this question in the Cisco area of networking, as more expertise is available there than here; so far, it's just been me!
0
 

Author Comment

by:jrb139
ID: 37850183
Hi Perarduaadastra
There are multiple connections as the asa is live with a lan a different WAN connection.

I'll take your suggestion and repost to Cisco area.
Thanks for your help.
Jo
0
 

Author Closing Comment

by:jrb139
ID: 37850186
Not Resolved - reposted to the cisco area.
0
 
LVL 15

Expert Comment

by:Perarduaadastra
ID: 37851099
jrb139

That's very generous of you, since my only useful suggestion was for you to ask someone else!

A better use of the points might have been to move the question rather than repost.

Perhaps a moderator can arrange this for you, as I feel rather uncomfortable about receiving points I didn't earn...
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Network traffic routing plays key role in your network, if you have single site with heavy browsing or multiple sites, replicating important application data from your Primary Default Gateway ,you have to route your other network traffic from your p…
The article explains the protocols and technology which is involved when two computers on different TCP/IP networks communicate with each other. In the diagram, a router is used to segregate two networks. The networks are 192.168.1.0/24 and 192…
Viewers will learn how to properly install and use Secure Shell (SSH) to work on projects or homework remotely. Download Secure Shell: Follow basic installation instructions: Open Secure Shell and use "Quick Connect" to enter credentials includi…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

687 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question