Yeah, I know PPPoE sucks and I've told the customer that I recommend using a
LinkSys router to handle the PPPoE and the Cisco VPN Client software for the
VPN/IPSEC for the sites with smaller amounts of people, and getting
Enhanced/static ADSL for the larger sites. But they're looking at the
bottom line long term and also maximum security (LinkSys is not really
secure enough as a NAT out to a bad website could provide a hole back in).
At the moment though, they want me to pursue getting PPPoE to work with the
Cisco gear.
--
Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
List email: [EMAIL PROTECTED]
Homepage: http://jason.artoo.net/
Cisco resources: http://r2cisco.artoo.net/
"Brandon Ripper" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hey
>
> My two cents in the matter. PPPoE is a mess. Alot of the
> "Baby-Bells" use PPPoE solution in order to undercut bandwidth. I hooked
up
> with a local provider out here in Phoenix for $45/month for a 1.5 meg
> bi-directional SDSL line. Downside is it runs PPPoE so I only see about
> 1,300 Kilobit per second throughput(which is still great for the money).
> Additionally alot of different providers do different wacky things with
> their PPPoE implementations. Some running proprietary versions or require
> special header info. A company called roaring penguin implemented a
> solution for linux (roaringpenguin.com) and it will "sniff" windows
> machines logging into the network to figure out the proprietary things
that
> are being done. Just my two cents...
>
> Had all sorts of problems, DHCP server(for ethernet) ran via PPPoE and
> required a "default" address be set so that it could expire the lease
right
> away and re-issue one ( so I just hardcoded the ethernet address). Then
the
> stupid authentication was screwy. In the end everything turned out fine,
> but I wonder if Cisco products work with these "proprietary"
> implementations of PPPoE.
>
> Brandon Ripper
> CCNA
>
> BTW- this "DSLPipe" by Lucent they provided seems to just be bridge back
to
> a main concentrator. Although they listed DLCI and port numbers on its
tag...
>
> At 09:42 PM 2/15/01 -0800, you wrote:
> >Thanks for the advice, I'll check out that PVC. Basically, we get Layer
1
> >connectivity to the ATM switch, but are failing to bring the PVC up (ILMI
> >errors). As I said, I'm not ATM expert. I don't think we're even to the
> >PPPoE stage of authentication (debug ppp negotiation & debug ppp
> >authentication never show any lines).
> >
> >The PVCs I do know about are 0/35 or 8/35, which work on the
static/Enhanced
> >DSL lines I've configured.
> >
> >Does ATM have a way of "auto detecting" the PVCs? I mean, how does the
> >Alcatel chipset (for instance, in the Westel Wirespeeds we're issued)
know
> >what PVC? At my house the PVC is 8/35, which works fine with my Westel,
but
> >the PVC is different at this PPPoE site, but yet the Westel knows or
figures
> >it out (I've tried my Westel at this PPPoE site just for kicks, and it
works
> >fine with the EnterNet 300 software on the PC).
> >
> >--
> >Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
> >List email: [EMAIL PROTECTED]
> >Homepage: http://jason.artoo.net/
> >Cisco resources: http://r2cisco.artoo.net/
> >
> >
> >""Blair"" <[EMAIL PROTECTED]> wrote in message
> >01b001c09752$8c19fe00$87cdfea9@remote">news:01b001c09752$8c19fe00$87cdfea9@remote...
> > > Jason,
> > >
> > > I'm not a cisco expert (yet) so please forgive me when I say I'm not
sure
> > > what you mean by "neither get me past Layer 2 ATM."
> > > Is it that the 1720 won't let you authenticate to the ISP? It seems
your
> > > PVCs are correct, but I've seen on www.dslreports.com that some folks
have
> > > tried 0/33, so you might want to try that. Also, make sure that you
check
> > > to make sure that there's still a DSL signal by keeping the Westell
set up
> > > as well.
> > > I hope that helps.
> > >
> > > Regards,
> > >
> > > Randy Blair - CNA, MCP
> > > Field Engineer, SBC/Advanced Solutions Inc.
> > > Ameritech Region
> > >
> > > ----- Original Message -----
> > > From: "Jason" <[EMAIL PROTECTED]>
> > > Newsgroups: groupstudy.cisco
> > > To: <[EMAIL PROTECTED]>
> > > Sent: Wednesday, February 14, 2001 11:50 PM
> > > Subject: SBI/PacBell "Basic" ADSL PVCs?
> > >
> > >
> > > > Here's what I just sent off to PacBell's support team, but I'm sure
I'll
> > > > have to battle their live tech support personnel to get in touch
with an
> > > > engineer who can answer this (if someone else knows, that'd be great
as
> >my
> > > > ATM knowledge is limited to configuring a few 1417 ADSL CPE
routers):
> > > >
> > > > Up until this point the customer has connected with their Westel
> >Wirespeed
> > > > using the EnterNet 300 software. However, we're moving to a new
platform
> > > for
> > > > VPN support and security:
> > > >
> > > > I'm configuring a Cisco 1720 router with an ADSL interface card for
a
> > > > customer with Basic ADSL which uses PPPoE. The Cisco 1720 supports
PPPoE
> > > > authentication, but I first need more ATM info. What PVC information
> > > should
> > > > I configure for the router? I've tried 0/35 & 8/35 (the two standard
> >PVCs
> > > I
> > > > know about for Enhanced ADSL), but neither get me past Layer 2 ATM.
> > > >
> > > > --
> > > >
> > > > As a side note, here's the base config I used on the 1720 and also
on an
> > > > 827-4v for my personal static "Enhanced" ADSL connection (no need
for
> > > PPPoE,
> > > > and PVC 0/35 worked):
> > > >
> > > > bridge irb
> > > > !
> > > > !
> > > > !
> > > > interface ATM0
> > > > no ip address
> > > > no ip route-cache
> > > > no ip mroute-cache
> > > > atm vc-per-vp 256
> > > > no atm ilmi-keepalive
> > > > pvc 0/35
> > > > !
> > > > dsl operating-mode auto
> > > > no fair-queue
> > > > bridge-group 1
> > > > !
> > > > interface FastEthernet0
> > > > ip address 192.168.45.172 255.255.255.0
> > > > speed auto
> > > > !
> > > > interface BVI1
> > > > ! I configure a static MAC so that I don't have to wait
> > > > ! for the PBI router's ARP table to
> > > > ! clear out when I change routers
> > > > mac-address 0000.0c85.8f1c
> > > > ip address 63.206.176.162 255.255.255.248
> > > > !
> > > > ip classless
> > > > !
> > > > bridge 1 protocol ieee
> > > > bridge 1 route ip
> > > >
> > > >
> > > > --
> > > > Jason Roysdon, CCNP+Security/CCDP, MCSE, CNA, Network+, A+
> > > > List email: [EMAIL PROTECTED]
> > > > Homepage: http://jason.artoo.net/
> > > > Cisco resources: http://r2cisco.artoo.net/
> > > >
> > > >
> > > >
> > > >
> > > > _________________________________
> > > > FAQ, list archives, and subscription info:
> > > http://www.groupstudy.com/list/cisco.html
> > > > Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]
> > > >
> > > >
> > >
> > > _________________________________
> > > FAQ, list archives, and subscription info:
> >http://www.groupstudy.com/list/cisco.html
> > > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> > >
> >
> >
> >_________________________________
> >FAQ, list archives, and subscription info:
> >http://www.groupstudy.com/list/cisco.html
> >Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _________________________________
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
