Solved

ASA 5510  pppoe on bt infinity fails

Posted on 2012-04-13
13
2,133 Views
Last Modified: 2013-11-12
Hi
I have a BT infinity line I am trying to connect to an asa 5510. The line does not appear to be initialising. Details below, anyone any ideas?

Config :-

interface Ethernet0/3
 nameif Infinity
 security-level 0
 pppoe client vpdn group Infinity
 ip address pppoe setroute

vpdn group Infinity request dialout pppoe
vpdn group Infinity localname C974463@hg70.btclick.com
vpdn group Infinity ppp authentication chap
vpdn username C974463@hg70.btclick.com password ***** store-local


Output from debug pppoe

PPPoE: send_padt:(Snd) Dest:0013.c482.3439 Src:0013.c482.3439 Type:0x8863=PPPoE-Discovery
PPPoE: Ver:1 Type:1 Code:A7=PADT Sess:345 Len:0
PPPoE: send_padi:(Snd) Dest:ffff.ffff.ffff Src:0013.c482.3439 Type:0x8863=PPPoE-Discovery
PPPoE: Ver:1 Type:1 Code:09=PADI Sess:0 Len:12
PPPoE: Type:0101:SVCNAME-Service Name Len:0
PPPoE: Type:0103:HOSTUNIQ-Host Unique Tag Len:4
PPPoE: 00000008
PPPoE: PPPoE:(Rcv) Dest:0013.c482.3439 Src:0030.8800.0006 Type:0x8863=PPPoE-Discovery
PPPoE: Ver:1 Type:1 Code:07=PADO Sess:0 Len:46
PPPoE: Type:0103:HOSTUNIQ-Host Unique Tag Len:4
PPPoE: 00000008
PPPoE: Type:0102:ACNAME-AC Name Len:30
PPPoE: bras-red6.bm-th-B2224060701971

PPPoE: Type:0101:SVCNAME-Service Name Len:0
PPPoE: PADO

PPPoE: send_padr:(Snd) Dest:0030.8800.0006 Src:0013.c482.3439 Type:0x8863=PPPoE-Discovery
PPPoE: Ver:1 Type:1 Code:19=PADR Sess:0 Len:46
PPPoE: Type:0103:HOSTUNIQ-Host Unique Tag Len:4
PPPoE: 00000008
PPPoE: Type:0102:ACNAME-AC Name Len:30
PPPoE: bras-red6.bm-th-B2224060701971

PPPoE: Type:0101:SVCNAME-Service Name Len:0
PPPoE: PPPoE:(Rcv) Dest:0013.c482.3439 Src:0030.8800.0006 Type:0x8863=PPPoE-Discovery
PPPoE: Ver:1 Type:1 Code:65=PADS Sess:2922 Len:46
PPPoE: Type:0103:HOSTUNIQ-Host Unique Tag Len:4
PPPoE: 00000008
PPPoE: Type:0101:SVCNAME-Service Name Len:0
PPPoE: Type:0102:ACNAME-AC Name Len:30
PPPoE: bras-red6.bm-th-B2224060701971

PPPoE: PADS

PPPoE: IN PADS from PPPoE tunnel

PPPoE: Opening PPP link and starting negotiations.

PPPoE: Shutting down client session

PPPoE: send_padt:(Snd) Dest:0013.c482.3439 Src:0013.c482.3439 Type:0x8863=PPPoE-Discovery
PPPoE: Ver:1 Type:1 Code:A7=PADT Sess:2922 Len:0
0
Comment
Question by:jrb139
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 8
  • 5
13 Comments
 
LVL 15

Expert Comment

by:Perarduaadastra
ID: 37841779
How are you connecting the BT Infinity to the ASA?
0
 

Author Comment

by:jrb139
ID: 37841859
Directly to the bt white box (modem), not using the homehub. I have been testing the BT infinity line connected like this but to a cisco 1841 and it works fine so I know I have all the credentials correct and that the line works fine.

It's just connecting via asa that seems to be failing!
0
 
LVL 15

Expert Comment

by:Perarduaadastra
ID: 37841873
The report seems to indicate that it all falls apart as soon as negotiations between the two ends of the connections start.

Have you tried different authentication methods? I know that in theory what works for the 1841 should work for the ASA, but they are very different bits of kit...
0
Surfing Is Meant To Be Done Outdoors

Featuring its rugged IP67 compliant exterior and delivering broad, fast, and reliable Wi-Fi coverage, the AP322 is the ideal solution for the outdoors. Manage this AP with either a Firebox as a gateway controller, or with the Wi-Fi Cloud for an expanded set of management features

 

Author Comment

by:jrb139
ID: 37841876
Do you mean like pap?
0
 
LVL 15

Expert Comment

by:Perarduaadastra
ID: 37841908
Yes; that's the only other one, really, as EAP is primarily used in wireless scenarios. However, PAP does seem unlikely as the password is transmitted in clear text - not a great idea!

Another thought has occurred to me; can the term "negotiations" refer to the link characteristics as well? If link speed or MTU size can't be agreed by the endpoints, that won't help much...
0
 
LVL 15

Expert Comment

by:Perarduaadastra
ID: 37841935
I've just had a look at the connection of one of my clients who uses a completely different device for his connection, and that device provides an option for auto-negotiation of the link; does the ASA allow you to do this?
0
 

Author Comment

by:jrb139
ID: 37841990
The Only Auto things available are the speed and duplex.
I have tried fixing these at 100/full and auto. didn't seem to make any difference.
0
 
LVL 15

Expert Comment

by:Perarduaadastra
ID: 37842019
I've just had a quick chat with my router, which is connected to BT's Infinity modem; the port speed is set to autosense, and the MTU size is default, which the greyed-out Custom field is showing as 1492 bytes.

I have found in the past that connectivity can be broken by specifying the wrong MTU size in the router/gateway/whatever appliance, so it's worth experimenting with at least the common values, unless BT can tell you definitively what it should be.
0
 
LVL 15

Expert Comment

by:Perarduaadastra
ID: 37842026
I'm away from my computer for a few hours now, so I hope that someone else can get you up and running, even if it wasn't me!
0
 
LVL 15

Accepted Solution

by:
Perarduaadastra earned 500 total points
ID: 37844139
Back again.

Another thought:

Have you got multiple public IP addresses on this interface? If so, such a configuration may need more expertise than I have.

It might be helpful if you re-posted this question in the Cisco area of networking, as more expertise is available there than here; so far, it's just been me!
0
 

Author Comment

by:jrb139
ID: 37850183
Hi Perarduaadastra
There are multiple connections as the asa is live with a lan a different WAN connection.

I'll take your suggestion and repost to Cisco area.
Thanks for your help.
Jo
0
 

Author Closing Comment

by:jrb139
ID: 37850186
Not Resolved - reposted to the cisco area.
0
 
LVL 15

Expert Comment

by:Perarduaadastra
ID: 37851099
jrb139

That's very generous of you, since my only useful suggestion was for you to ask someone else!

A better use of the points might have been to move the question rather than repost.

Perhaps a moderator can arrange this for you, as I feel rather uncomfortable about receiving points I didn't earn...
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Secure Connection Failed - Sonicwall FW 1 106
Fortigate 100D NTP Issue 4 157
Swapping port on a  Cisco 5510 firewall 1 49
Cisco ASA 5510 Question 3 12
Sometimes you have to pull out old tricks to get a new firewall to work… While we were installing a new Sonicwall at a customers site we found that sites they were able to visit before were not working.  It seemed random and we could not understa…
Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question