From: Charles Church (cchurch@wamnet.com)
Date: Wed Jun 25 2003 - 13:23:46 GMT-3
John,
So you're saying you can ping using PPP and local authentication, but it
doesn't work when you use AAA? I've never had to specifically enable any
CPs. Usually, adding CDP, IPX, Appletalk, etc will enable those respective
CPs. I don't think the CP will be open if authentication fails. Like ISDN,
start the config simple, and then add the more complex stuff one at a time
to narrow it down to the actual cause.
Chuck Church
CCIE #8776, MCNE, MCSE
Wam!Net Government Services
13665 Dulles Technology Dr. Ste 250
Herndon, VA 20171
Office: 703-480-2569
Cell: 703-819-3495
cchurch@wamnet.com
PGP key: http://pgp.mit.edu:11371/pks/lookup?search=chuck+church&op=index
-----Original Message-----
From: John Matijevic [mailto:matijevi@bellsouth.net]
Sent: Wednesday, June 25, 2003 12:04 PM
To: Charles Church; ccielab@groupstudy.com
Subject: Re: ppp authentication on serial line
Thanks for the reply,
I have not configured the following:
ppp ipcp mask 255.255.255.224,
do I need this on the interface when using a local database, if im not using
a tacacs+ to authenticat? Finally when I do the debugs, it does show that
the authentication goes through ok with the local database. Again the status
and protocol are up.
Sincerely,
Matijevic
----- Original Message -----
From: "Charles Church" <cchurch@wamnet.com>
To: "John Matijevic" <matijevi@bellsouth.net>; <ccielab@groupstudy.com>
Sent: Wednesday, June 25, 2003 11:46 AM
Subject: RE: ppp authentication on serial line
> Are any of the CPs established? On the interface, you should see IPCP and
> CDPCP open. CDP isn't really needed, but it'll tell you if packets are
> crossing successfully.
>
> Chuck Church
> CCIE #8776, MCNE, MCSE
> Wam!Net Government Services
> 13665 Dulles Technology Dr. Ste 250
> Herndon, VA 20171
> Office: 703-480-2569
> Cell: 703-819-3495
> cchurch@wamnet.com
> PGP key: http://pgp.mit.edu:11371/pks/lookup?search=chuck+church&op=index
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> John Matijevic
> Sent: Wednesday, June 25, 2003 11:30 AM
> To: ccielab@groupstudy.com
> Subject: ppp authentication on serial line
>
>
> Hello Team,
> Hopefullly an easy quick question that I am missing something obvious:
> Here it goes I am configuring ppp encapsulation and chap authentication on
a
> serial line to use with AAA. For some reason I can get the serial line
> status
> and protocol to up but cannot ping the remote side or local, I do have the
> username configured on both routers. IF I use HDLC and no AAA it works
fine,
> and I can ping both sides. I have done this many times with the BRI
> interface
> and with ISDN. Has anyone done this before with serial? Any help greatly
> appreciated !!
> Sincerely,
> Matijevic
>
>
> _______________________________________________________________________
> You are subscribed to the GroupStudy.com CCIE R&S Discussion Group.
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
> _______________________________________________________________________
> You are subscribed to the GroupStudy.com CCIE R&S Discussion Group.
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Fri Jul 04 2003 - 11:11:09 GMT-3