RE: debug ppp authentication [7:44575]
This is off a 2504. It's also on my other 2500s with 12.x code What are you running for a router? one of those space heaters from a long time ago ;-) MikeS CentralRouter#debug ppp authen CentralRouter#debug ppp authentication ? CentralRouter#debug ppp authentication PPP authentication debugging is on CentralRouter#ping 192.168.1.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds: 00:05:16: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up 00:05:16: %DIALER-6-BIND: Interface BRI0:1 bound to profile Dialer1. 00:05:16: BR0:1 PPP: Treating connection as a callout 00:05:16: BR0:1 PPP: Phase is AUTHENTICATING, by the peer 00:05:16: BR0:1 AUTH: Started process 0 pid 28 00:05:16: BR0:1 CHAP: I CHALLENGE id 1 len 33 from BranchRouter 00:05:16: BR0:1 CHAP: O RESPONSE id 1 len 34 from CentralRouter 00:05:16: BR0:1 CHAP: I SUCCESS id 1 len 4 00:05:17: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, changed state to up... 00:05:22: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 55 55. Success rate is 0 percent (0/5) CentralRouter# Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=44613t=44575 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: debug ppp authentication [7:44575]
Here is what I had on mine: 2 2524's RTG# 2d01h: Se0 PPP: Treating connection as a dedicated line 2d01h: Se0 PAP: O AUTH-REQ id 2 len 14 from RTG 2d01h: Se0 PAP: I AUTH-REQ id 2 len 14 from RTF 2d01h: Se0 PAP: I AUTH-ACK id 2 len 5 2d01h: Se0 PAP: Authenticating peer RTF 2d01h: Se0 PAP: O AUTH-ACK id 2 len 5 I configed RTG and RTF with pap auth. on s 0, did a shut and a no shut and got this result. Config on RTG: Current configuration: ! interface Serial0 ip address 1.1.1.2 255.255.255.0 encapsulation ppp no fair-queue service-module 56k clock source internal ppp authentication pap ppp pap sent-username RTG password 7 070C285F4D06 end Config on RTF: Current configuration: ! interface Serial0 ip address 1.1.1.1 255.255.255.0 encapsulation ppp no fair-queue ppp authentication pap ppp pap sent-username RTF password 7 060506324F41 end Using ver. RTF#sh ver Cisco Internetwork Operating System Software IOS (tm) 2500 Software (C2500-JS-L), Version 12.1(2), RELEASE SOFTWARE (fc1) Hope this helps. From: Mike Sweeney Reply-To: Mike Sweeney To: [EMAIL PROTECTED] Subject: RE: debug ppp authentication [7:44575] Date: Tue, 21 May 2002 09:58:36 -0400 This is off a 2504. It's also on my other 2500s with 12.x code What are you running for a router? one of those space heaters from a long time ago ;-) MikeS CentralRouter#debug ppp authen CentralRouter#debug ppp authentication ? CentralRouter#debug ppp authentication PPP authentication debugging is on CentralRouter#ping 192.168.1.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds: 00:05:16: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up 00:05:16: %DIALER-6-BIND: Interface BRI0:1 bound to profile Dialer1. 00:05:16: BR0:1 PPP: Treating connection as a callout 00:05:16: BR0:1 PPP: Phase is AUTHENTICATING, by the peer 00:05:16: BR0:1 AUTH: Started process 0 pid 28 00:05:16: BR0:1 CHAP: I CHALLENGE id 1 len 33 from BranchRouter 00:05:16: BR0:1 CHAP: O RESPONSE id 1 len 34 from CentralRouter 00:05:16: BR0:1 CHAP: I SUCCESS id 1 len 4 00:05:17: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, changed state to up... 00:05:22: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 55 55. Success rate is 0 percent (0/5) CentralRouter# _ Send and receive Hotmail on your mobile device: http://mobile.msn.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=44661t=44575 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: debug ppp authentication [7:44575]
I can confirm it exists. If I remembered what Serial links were connected to what in the lab, I would do your experiment as well. Anyone want to drive to my office and look at the rack for me ? :) ROUTER_A#debug ppp ? authentication CHAP and PAP authentication bap BAP protocol transactions cbcpCallback Control Protocol negotiation compression PPP compression error Protocol errors and error statistics multilink Multilink activity negotiation Protocol parameter negotiation packet Low-level PPP packet dump tasks PPP background tasks Thanks Larry -Original Message- From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] Sent: Monday, May 20, 2002 6:15 PM To: [EMAIL PROTECTED] Subject: debug ppp authentication [7:44575] Cisco documentation claims that there is a debug ppp authentication command. Such a command does not exist on my routers (which are running 11.0). Would anyone be willing to see if it exists on newer routers? Set up two routers connected via a serial link to use PPP encapsulation. Use PAP authentication. Shut down one of the interfaces, enable the debug command, no shut the interface and see what happens! I say to use PAP because I know that the debug ppp chap command works. I'm more interested in seeing if you can debug PAP. Thanks! Priscilla Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=44576t=44575 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: debug ppp authentication [7:44575]
Almost forgot: 3600 Software (C3640-JO3S56I-M), Version 12.1(3a)T1, RELEASE SOFTWARE Thanks Larry -Original Message- From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] Sent: Monday, May 20, 2002 6:15 PM To: [EMAIL PROTECTED] Subject: debug ppp authentication [7:44575] Cisco documentation claims that there is a debug ppp authentication command. Such a command does not exist on my routers (which are running 11.0). Would anyone be willing to see if it exists on newer routers? Set up two routers connected via a serial link to use PPP encapsulation. Use PAP authentication. Shut down one of the interfaces, enable the debug command, no shut the interface and see what happens! I say to use PAP because I know that the debug ppp chap command works. I'm more interested in seeing if you can debug PAP. Thanks! Priscilla Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=44577t=44575 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: debug ppp authentication [7:44575]
It does, I used it last Thursday while troubleshooting what turned out to be a Radius server issue. C7500MIX#debug ppp ? authentication CHAP and PAP authentication bap BAP protocol transactions cbcpCallback Control Protocol negotiation compression PPP compression error Protocol errors and error statistics multilink Multilink activity negotiation Protocol parameter negotiation packet Low-level PPP packet dump redundancy PPP redundancy tasks PPP background tasks Dave BTW this router is running 12.0.2something beta Priscilla Oppenheimer wrote: Cisco documentation claims that there is a debug ppp authentication command. Such a command does not exist on my routers (which are running 11.0). Would anyone be willing to see if it exists on newer routers? Set up two routers connected via a serial link to use PPP encapsulation. Use PAP authentication. Shut down one of the interfaces, enable the debug command, no shut the interface and see what happens! I say to use PAP because I know that the debug ppp chap command works. I'm more interested in seeing if you can debug PAP. Thanks! Priscilla Priscilla Oppenheimer http://www.priscilla.com -- David Madland CCIE# 2016 Sr. Network Engineer Qwest Communications Inc. 612-664-3367 [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=44579t=44575 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: debug ppp authentication [7:44575]
Thanks! My routers only have debug ppp chap, as I mentioned. I've never seen PAP in action! Very exciting. ;-) Thanks to everyone who replied. Sometimes the debug reference manual claims that commands exist when they really don't. I don't always trust it without trying, but my hubby won't let me buy new routers. Sigh. Priscilla At 08:34 PM 5/20/02, Roberts, Larry wrote: Ok, after a little guess work, I have it! Routers are RouterB and RouterE Serial 0/1 on both are connected via a T-1 crossover Chap authentication callin on routerB Chap authentication optional on routerE Username is ROUTERB and ROUTERE respectively. And from router B we have: 2w4d: %LINK-3-UPDOWN: Interface Serial0/1, changed state to up 2w4d: Se0/1 CHAP: Using alternate hostname ROUTERB 2w4d: Se0/1 CHAP: O CHALLENGE id 189 len 28 from ROUTERB 2w4d: Se0/1 CHAP: I CHALLENGE id 176 len 28 from ROUTERE 2w4d: Se0/1 CHAP: Using alternate hostname ROUTERB 2w4d: Se0/1 CHAP: O RESPONSE id 176 len 28 from ROUTERB 2w4d: Se0/1 CHAP: I RESPONSE id 189 len 28 from ROUTERE 2w4d: Se0/1 CHAP: O SUCCESS id 189 len 4 2w4d: Se0/1 CHAP: I SUCCESS id 176 len 4 ROUTER_B# Now for Router E we have: 2w4d: Se0/1 CHAP: Using alternate hostname ROUTERE 2w4d: Se0/1 CHAP: O CHALLENGE id 177 len 28 from ROUTERE 2w4d: Se0/1 CHAP: I CHALLENGE id 190 len 28 from ROUTERB 2w4d: Se0/1 CHAP: Using alternate hostname ROUTERE 2w4d: Se0/1 CHAP: O RESPONSE id 190 len 28 from ROUTERE 2w4d: %LINK-3-UPDOWN: Interface Serial0/1, changed state to up 2w4d: Se0/1 CHAP: I RESPONSE id 177 len 28 from ROUTERB 2w4d: Se0/1 CHAP: O SUCCESS id 177 len 4 2w4d: Se0/1 CHAP: I SUCCESS id 190 len 4 ROUTER_E# Next up PPP Pap Router B: ( ppp authen pap optional ) 2w4d: %SYS-5-CONFIG_I: Configured from console by console 2w4d: %LINK-3-UPDOWN: Interface Serial0/1, changed state to down 2w4d: Se0/1 PPP: Treating connection as a dedicated line 2w4d: %LINK-3-UPDOWN: Interface Serial0/1, changed state to up 2w4d: Se0/1 PAP: O AUTH-REQ id 2 len 18 from ROUTERB 2w4d: Se0/1 PAP: I AUTH-REQ id 2 len 18 from ROUTERE 2w4d: Se0/1 PAP: Authenticating peer ROUTERE 2w4d: Se0/1 PAP: O AUTH-ACK id 2 len 5 2w4d: Se0/1 PAP: I AUTH-ACK id 2 len 5 2w4d: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/1, changed state t o up ROUTER_B# Router E: ( ppp authen pap callin ) 2w4d: %LINK-3-UPDOWN: Interface Serial0/1, changed state to up 2w4d: Se0/1 PPP: Treating connection as a dedicated line 2w4d: Se0/1 PAP: O AUTH-REQ id 2 len 18 from ROUTERE 2w4d: Se0/1 PAP: I AUTH-REQ id 2 len 18 from ROUTERB 2w4d: Se0/1 PAP: Authenticating peer ROUTERB 2w4d: Se0/1 PAP: O AUTH-ACK id 2 len 5 2w4d: Se0/1 PAP: I AUTH-ACK id 2 len 5 2w4d: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/1, changed state t o up ROUTER_E# Thanks Larry -Original Message- From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] Sent: Monday, May 20, 2002 6:15 PM To: [EMAIL PROTECTED] Subject: debug ppp authentication [7:44575] Cisco documentation claims that there is a debug ppp authentication command. Such a command does not exist on my routers (which are running 11.0). Would anyone be willing to see if it exists on newer routers? Set up two routers connected via a serial link to use PPP encapsulation. Use PAP authentication. Shut down one of the interfaces, enable the debug command, no shut the interface and see what happens! I say to use PAP because I know that the debug ppp chap command works. I'm more interested in seeing if you can debug PAP. Thanks! Priscilla Priscilla Oppenheimer http://www.priscilla.com Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=44584t=44575 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: debug ppp authentication [7:44575]
No problem. Turns out it's a useful command to. I was able to see in the log that I had typo'd the sent hostname. I was sure I had the right config, but it wouldn't come up. I looked in the log and kept seeing a challenge From ROUTEBR Huh, useful debug, what will they think of next :) Thanks Larry -Original Message- From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] Sent: Monday, May 20, 2002 8:40 PM To: [EMAIL PROTECTED] Subject: RE: debug ppp authentication [7:44575] Thanks! My routers only have debug ppp chap, as I mentioned. I've never seen PAP in action! Very exciting. ;-) Thanks to everyone who replied. Sometimes the debug reference manual claims that commands exist when they really don't. I don't always trust it without trying, but my hubby won't let me buy new routers. Sigh. Priscilla At 08:34 PM 5/20/02, Roberts, Larry wrote: Ok, after a little guess work, I have it! Routers are RouterB and RouterE Serial 0/1 on both are connected via a T-1 crossover Chap authentication callin on routerB Chap authentication optional on routerE Username is ROUTERB and ROUTERE respectively. And from router B we have: 2w4d: %LINK-3-UPDOWN: Interface Serial0/1, changed state to up 2w4d: Se0/1 CHAP: Using alternate hostname ROUTERB 2w4d: Se0/1 CHAP: O CHALLENGE id 189 len 28 from ROUTERB 2w4d: Se0/1 CHAP: I CHALLENGE id 176 len 28 from ROUTERE 2w4d: Se0/1 CHAP: Using alternate hostname ROUTERB 2w4d: Se0/1 CHAP: O RESPONSE id 176 len 28 from ROUTERB 2w4d: Se0/1 CHAP: I RESPONSE id 189 len 28 from ROUTERE 2w4d: Se0/1 CHAP: O SUCCESS id 189 len 4 2w4d: Se0/1 CHAP: I SUCCESS id 176 len 4 ROUTER_B# Now for Router E we have: 2w4d: Se0/1 CHAP: Using alternate hostname ROUTERE 2w4d: Se0/1 CHAP: O CHALLENGE id 177 len 28 from ROUTERE 2w4d: Se0/1 CHAP: I CHALLENGE id 190 len 28 from ROUTERB 2w4d: Se0/1 CHAP: Using alternate hostname ROUTERE 2w4d: Se0/1 CHAP: O RESPONSE id 190 len 28 from ROUTERE 2w4d: %LINK-3-UPDOWN: Interface Serial0/1, changed state to up 2w4d: Se0/1 CHAP: I RESPONSE id 177 len 28 from ROUTERB 2w4d: Se0/1 CHAP: O SUCCESS id 177 len 4 2w4d: Se0/1 CHAP: I SUCCESS id 190 len 4 ROUTER_E# Next up PPP Pap Router B: ( ppp authen pap optional ) 2w4d: %SYS-5-CONFIG_I: Configured from console by console 2w4d: %LINK-3-UPDOWN: Interface Serial0/1, changed state to down 2w4d: Se0/1 PPP: Treating connection as a dedicated line 2w4d: %LINK-3-UPDOWN: Interface Serial0/1, changed state to up 2w4d: Se0/1 PAP: O AUTH-REQ id 2 len 18 from ROUTERB 2w4d: Se0/1 PAP: I AUTH-REQ id 2 len 18 from ROUTERE 2w4d: Se0/1 PAP: Authenticating peer ROUTERE 2w4d: Se0/1 PAP: O AUTH-ACK id 2 len 5 2w4d: Se0/1 PAP: I AUTH-ACK id 2 len 5 2w4d: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/1, changed state t o up ROUTER_B# Router E: ( ppp authen pap callin ) 2w4d: %LINK-3-UPDOWN: Interface Serial0/1, changed state to up 2w4d: Se0/1 PPP: Treating connection as a dedicated line 2w4d: Se0/1 PAP: O AUTH-REQ id 2 len 18 from ROUTERE 2w4d: Se0/1 PAP: I AUTH-REQ id 2 len 18 from ROUTERB 2w4d: Se0/1 PAP: Authenticating peer ROUTERB 2w4d: Se0/1 PAP: O AUTH-ACK id 2 len 5 2w4d: Se0/1 PAP: I AUTH-ACK id 2 len 5 2w4d: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/1, changed state t o up ROUTER_E# Thanks Larry -Original Message- From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] Sent: Monday, May 20, 2002 6:15 PM To: [EMAIL PROTECTED] Subject: debug ppp authentication [7:44575] Cisco documentation claims that there is a debug ppp authentication command. Such a command does not exist on my routers (which are running 11.0). Would anyone be willing to see if it exists on newer routers? Set up two routers connected via a serial link to use PPP encapsulation. Use PAP authentication. Shut down one of the interfaces, enable the debug command, no shut the interface and see what happens! I say to use PAP because I know that the debug ppp chap command works. I'm more interested in seeing if you can debug PAP. Thanks! Priscilla Priscilla Oppenheimer http://www.priscilla.com Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=44592t=44575 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
