Brian,

add the following to your config, and then try your pings again.
---
PIX#(config) conduit permit icmp any any
---
I believe your PPPoE connection is working, as proof from your output below:

>>PPPoE Tunnel and Session Information (Total tunnels=1 sessions=1)
>>      Tunnel id 0, 1 active sessions
>>      time since change 6015 secs
>>      Remote MAC Address 00:00:00:xx
>>      1010 packets sent, 1023 received, 12641 bytes sent, 0 received
>>      Remote MAC is 00:00:
>>Session state is SESSION_UP
>>      Time since event change 7687 secs, interface outside
>>      PPP interface id is 1
>>      1010 packets sent, 1023 received, 12641 bytes sent, 0 received

HTHs,
Mark
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Brian Zeitz
Sent: Friday, May 17, 2002 8:48 AM
To: [EMAIL PROTECTED]
Subject: Pix 515 on ADSL Help! :) [7:44346]


Well, I upgraded my pix 515 to 6.2. I am kind of new to firewalls,
besides I can't use the PDM. "This version of PDM does not officially
support PIX 6.2(1). Please upgrade PDM.", I guess this is a good reason
to learn the command line in pix. I cant ping  theISPs DNS servers from
the PDM. Any way to test if my Username and password is working for ADSL
?



 My ISP (verizon, requires a U/P for PPPoE, I am not sure if it is
accepting the password. The modem lights are all green.



Anyhow, it's saying UP/UP, and I have the link up, but I am not sure how
to check if my PPPOE password is working. I am using CHAP, maybe this is
not right.

I donno, it looks like its working, but I cant get outside, even if I
use the DHCP Server feature. I am also wondering if failover is going to
work with ADSL, which is another issue. Keep in mind I am not sure if
the 515 will even work with ADSL as someone pointed out, it may not be
supported although I am running Pix 6.2(1)



My question is how can I test that my PPPoE required Username and
password are correct, and I am authenticated. I am now working on
getting Debug PPPoE to see maybe if I can find out if this is working.
Any pointers would be helpful.





mydev# show vpdn username

vpdn username vez2bxe password ********





mydev# show vpdn group verz1

vpdn group verz1 request dialout pppoe

vpdn group verz1 localname vez2vbxe

vpdn group verz1 ppp authentication chap



mydev# show vpdn pppinterface



PPP virtual interface id = 1

PPP authentication protocol is CHAP

Server ip address is 10.10.26.10

Our ip address is 151.22.13.12

Transmitted Pkts: 1096, Received Pkts: 1109, Error Pkts: 0

MPPE key strength is None

  MPPE_Encrypt_Pkts: 0,  MPPE_Encrypt_Bytes: 0

  MPPE_Decrypt_Pkts: 0,  MPPE_Decrypt_Bytes: 0

  Rcvd_Out_Of_Seq_MPPE_Pkts: 0







mydev(config)# show int e0

interface ethernet0 "outside" is up, line protocol is up

  Hardware is i82559 ethernet, address is 0.000.

  IP address 151.22.13.13, subnet mask 255.255.255.255

  MTU 1492 bytes, BW 10000 Kbit half duplex

        1410 packets input, 84908 bytes, 0 no buffer

        Received 464 broadcasts, 0 runts, 0 giants

        0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

        1305 packets output, 272926 bytes, 0 underruns

        0 output errors, 0 collisions, 0 interface resets

        0 babbles, 0 late collisions, 0 deferred

        1 lost carrier, 0 no carrier

        input queue (curr/max blocks): hardware (128/128) software (0/1)

        output queue (curr/max blocks): hardware (0/1) software (0/1)

vesdev.com(config)#







mydev# show vpdn





%No active L2TP tunnels





%No active PPTP tunnels





PPPoE Tunnel and Session Information (Total tunnels=1 sessions=1)





Tunnel id 0, 1 active sessions

  time since change 6015 secs

  Remote MAC Address 00:00:00:xx

  1010 packets sent, 1023 received, 12641 bytes sent, 0 received

Remote MAC is 00:00:

  Session state is SESSION_UP

    Time since event change 7687 secs, interface outside

    PPP interface id is 1

    1010 packets sent, 1023 received, 12641 bytes sent, 0 received





usage: debug pppoe {error|packet|event}

Usage:  [no] debug icmp trace

        [no] debug packet  [src  [netmask ]]

                [dst  [netmask ]]

                [[proto icmp]|[proto tcp [sport ] [dport ]]

                |[proto udp [sport ] [dport d_p]] [rx|tx|both]

        [no] debug sqlnet

        [no] debug crypto ipsec|isakmp|ca

        [no] debug dhcpc detail|error|packet

        [no] debug dhcpd event|packet

        [no] debug vpdn error|event|packet

        [no] debug ppp error|io|uauth|chap|upap|negotiation

        [no] debug pppoe error|packet|event

        [no] debug ssh

        [no] debug h323 h225|h245|ras asn|event

        [no] debug fover

        [no] debug rtsp

        [no] debug fixup

        [no] debug rip

        [no] debug pdm history

        [no] debug ssl [cipher|device]

        [no] debug dns

        [no] debug sip

        [no] debug skinny

        [no] debug access-list

        [no] debug radius [session|all|user ]

        [no] debug ntp
[adjust|authentication|events|loopfilter|packets|params|

                select|sync|validity]

        [no] debug ils

        [no] debug igmp

        [no] debug mfwd

mydev#

mydev# debug pppoe

usage: debug pppoe {error|packet|event}

Usage:  [no] debug icmp trace

        [no] debug packet  [src  [netmask ]]

                [dst  [netmask ]]

                [[proto icmp]|[proto tcp [sport ] [dport ]]

                |[proto udp [sport ] [dport d_p]] [rx|tx|both]

        [no] debug sqlnet

        [no] debug crypto ipsec|isakmp|ca

        [no] debug dhcpc detail|error|packet

        [no] debug dhcpd event|packet

        [no] debug vpdn error|event|packet

        [no] debug ppp error|io|uauth|chap|upap|negotiation

        [no] debug pppoe error|packet|event

        [no] debug ssh

        [no] debug h323 h225|h245|ras asn|event

        [no] debug fover

        [no] debug rtsp

        [no] debug fixup

        [no] debug rip

        [no] debug pdm history

        [no] debug ssl [cipher|device]

        [no] debug dns

        [no] debug sip

        [no] debug skinny

        [no] debug access-list

        [no] debug radius [session|all|user ]

        [no] debug ntp
[adjust|authentication|events|loopfilter|packets|params|

                select|sync|validity]

        [no] debug ils

        [no] debug igmp




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=44365&t=44346
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to