callback using NM-8AM possible

You can do callback with an analog modem. However, IOS will not get the CLID from the incoming call, so you can't use this as the basis to determine the callback number. You would need to configure the callback number on some other basis - I believe that, with MSCB, the client can dynamically enter his callback number, or you could use exec callback with a callback number configured for his authenticated username, etc.

Aaron

Ayon kay Aaron Leonard:

great. I've tried configuring it...so far, my dial-up pc "hangs" at verifying username and password..." I've turned on callback debugging and as far as I can see, I only get Interface async40, changed state to up...

here's my relevant config

username dialin callback-dialstring "" password 0 cisco ! aaa new-model ! ! aaa authentication login default none aaa authentication login use-local local aaa authentication ppp default local aaa session-id common ip subnet-zero

chat-script offhook "" "ATH1" OK chat-script callback ABORT ERROR ABORT BUSY "" "ATZ" OK "ATDT \\T" TIMEOUT60 CONN ECT \\c ! interface Group-Async2 ip unnumbered Loopback0 encapsulation ppp ip tcp header-compression dialer in-band dialer idle-timeout 900 dialer-group 1 async mode interactive peer default ip address pool callback ppp max-bad-auth 10 ppp callback accept ppp authentication pap chap group-range 40 40 ! ip local pool callback xxx.xxx.xxx.xxx ! line 40 script modem-off-hook offhook script callback callback login authentication use-local modem InOut modem autoconfigure discovery autocommand ppp transport preferred telnet transport input all autoselect during-login autoselect ppp telnet transparent !

Any ideas?

thanks

Actually,

I've also turned on ppp authentication debugging on...and I can see that pap authentication fails even though i have login authentication use-local in line 40....but when i change that to login authentication radius the authentication works fine...what parameter do i need to enter for line 40 so that local database is used for the authentication?

thanks

Garlic,

I don't quite have the time to go thru your config right now ... but I can give you some pointers.

For using exec callback ... here are some tips I wrote up back a bazillion years ago ('97), before MSCB was around:

For MSCB (preferable, if you can do it), here's this tip:

In any case, I would not want to attempt this without having all applicable debugs turned on. (You will see annotated debugs in each of the above locations.)

Good luck,

Aaron

Hi Aaron,

Actually, My config is based on the two links you gave me.....hehehe...thats why i cant figure out whats wrong...

Well, turn on the debugs, they're the only way you're going to figure this out.

Aaron

Hi,

here's my debug output:

I'm really puzzled as to my pap authentication fails?

6d22h: Modem 1/7 ACF: State: Ringing 6d22h: Modem 1/7 ACF: Event: Incoming Ring 6d22h: CSM_ANALOG_MODEM_IDLE: MODEM_STARTING_CONNECT at slot 1, port 7

6d22h: ANALOG_CONNECT_INITIATED: MODEM_ANALOG_CALL_IN at slot 1, port 7

6d22h: Modem 1/7 ACF: Event: Hook state: Off Hook Answering 6d22h: Modem 1/7 ACF: State: Answering 6d22h: ANALOG_CONNECT_INITIATED: MODEM_CONNECTED at slot 1, port 7

6d22h: Call Handle failed for Modem 1/7

6d22h: Modem 1/7 ACF: Event: CONNECT V34/LAPM/V44/33600:TX/33600:RX 6d22h: Modem 1/7 ACF: State: Connected 6d22h: TTY40: DSR came up 6d22h: tty40: Modem: IDLE->(unknown) 6d22h: TTY40: EXEC creation 6d22h: AAA/BIND(000000C7): Bind i/f Async40 6d22h: AAA/AUTHEN/LOGIN (000000C7): Pick method list 'use-local' 6d22h: TTY40: create timer type 10, 30 seconds 6d22h: TTY40: Autoselect(2) sample [suppressed--line is not echoing] 6d22h: TTY40: Autoselect(2) sample [suppressed--line is not echoing] 6d22h: TTY40: Autoselect(2) sample [suppressed--line is not echoing] 6d22h: TTY40: Autoselect(2) sample 7EFF7D23 6d22h: TTY40 Autoselect cmd: ppp negotiate 6d22h: TTY40: pause timer type 10 (OK) 6d22h: TTY40: EXEC creation 6d22h: TTY40: create timer type 1, 600 seconds 6d22h: TTY40: destroy timer type 1 6d22h: TTY40: no timer type 0 to destroy 6d22h: TTY40: no timer type 2 to destroy 6d22h: As40 PPP: Using dialer call direction 6d22h: As40 PPP: Treating connection as a callin 6d22h: AAA/AUTHOR (000000C7): Method=If-authen for method list id=00000000.Skip author 6d22h: As40 PPP: Authorization NOT required 6d22h: Modem 1/7 ACF: CMD PPP mode active 6d22h: Modem 1/7 ACF: CMD PPP escape maps set: TX map=00000000 RX map=FFFFFFFF 6d22h: %LINK-3-UPDOWN: Interface Async40, changed state to up 6d22h: Modem 1/7 ACF: CMD PPP escape maps set: TX map=00000000 RX map=00000000 6d22h: As40 PAP: I AUTH-REQ id 28 len 15 from "test" 6d22h: As40 PAP: Authenticating peer test 6d22h: AAA/AUTHEN/PPP (000000C7): Pick method list 'default' 6d22h: As40 PPP: Sent PAP LOGIN Request 6d22h: As40 PPP: Received LOGIN Response FAIL 6d22h: As40 PAP: O AUTH-NAK id 28 len 10 msg is "E=691" 6d22h: As40 AUTH: Will allow 9 more authentication attempts 6d22h: ANALOG_MODEM_CONNECTED: MODEM_DISCONNECTED at slot 1, port 7

6d22h: Modem 1/7 CSM: CSM_MODEM_DEALLOCATE: modem is deallocated

6d22h: Modem 1/7 ACF: Event: Hook state: On Hook 6d22h: Modem 1/7 ACF: State: Hangup 6d22h: Modem 1/7 ACF: Event: DISCONNECT 6d22h: Modem 1/7 ACF: State: Idle 6d22h: TTY40: DSR was dropped 6d22h: tty40: Modem: READY->(unknown) 6d22h: TTY40: dropping DTR, hanging up 6d22h: TTY40: Async Int reset: Dropping DTR 6d22h: tty40: Modem: HANGUP->(unknown) 6d22h: Modem 1/7 ACF: CMD DTR set low 6d22h: Modem 1/7 ACF: CMD DTR set low 6d22h: TTY40: cleanup pending. Delaying DTR 6d22h: %LINK-5-CHANGED: Interface Async40, changed state to reset 6d22h: TTY40: cleanup pending. Delaying DTR 6d22h: TTY40: cleanup pending. Delaying DTR 6d22h: TTY40: cleanup pending. Delaying DTR 6d22h: TTY40: no timer type 0 to destroy 6d22h: TTY40: no timer type 1 to destroy 6d22h: TTY40: no timer type 3 to destroy 6d22h: TTY40: no timer type 4 to destroy 6d22h: TTY40: destroy timer type 10 6d22h: TTY40: no timer type 2 to destroy 6d22h: Async40: allowing modem_process to continue hangup 6d22h: Modem 1/7 ACF: CMD Character mode active 6d22h: TTY40: restoring DTR 6d22h: Modem 1/7 ACF: CMD DTR set high 6d22h: Modem 1/7 ACF: State: Endcall 6d22h: TTY40: autoconfigure probe started 6d22h: Modem 1/7 ACF: Event: ENDCALL: Disconnect Received 6d22h: Modem 1/7 ACF: State: Init 6d22h: Modem 1/7 ACF: State: Idle 6d22h: %LINK-3-UPDOWN: Interface Async40, changed state to down 6d22h: ANALOG_MODEM_CONNECTED: MODEM_DISCONNECTED at slot 1, port 0

6d22h: Modem 1/0 CSM: CSM_MODEM_DEALLOCATE: modem is deallocated

6d22h: Modem 1/0 ACF: Event: Hook state: On Hook 6d22h: Modem 1/0 ACF: State: Hangup 6d22h: Modem 1/0 ACF: Event: DISCONNECT 6d22h: Modem 1/0 ACF: State: Idle 6d22h: TTY33: DSR was dropped 6d22h: tty33: Modem: READY->(unknown) 6d22h: TTY33: dropping DTR, hanging up 6d22h: TTY33: Async Int reset: Dropping DTR 6d22h: tty33: Modem: HANGUP->(unknown) 6d22h: Modem 1/0 ACF: CMD DTR set low 6d22h: Modem 1/0 ACF: CMD DTR set low 6d22h: TTY33: cleanup pending. Delaying DTR 6d22h: %LINK-5-CHANGED: Interface Async33, changed state to reset 6d22h: TTY33: cleanup pending. Delaying DTR 6d22h: %LINEPROTO-5-UPDOWN: Line protocol on Interface Async33, changed state to down 6d22h: TTY33: cleanup pending. Delaying DTR 6d22h: TTY33: cleanup pending. Delaying DTR 6d22h: TTY33: no timer type 0 to destroy 6d22h: TTY33: no timer type 1 to destroy 6d22h: TTY33: no timer type 3 to destroy 6d22h: TTY33: no timer type 4 to destroy 6d22h: TTY33: no timer type 10 to destroy 6d22h: TTY33: no timer type 2 to destroy 6d22h: Async33: allowing modem_process to continue hangup 6d22h: Modem 1/0 ACF: CMD Character mode active 6d22h: TTY33: restoring DTR 6d22h: Modem 1/0 ACF: CMD DTR set high 6d22h: Modem 1/0 ACF: State: Endcall 6d22h: TTY33: autoconfigure probe started 6d22h: Modem 1/0 ACF: Event: ENDCALL: Retrain Failed 6d22h: Modem 1/0 ACF: State: Init 6d22h: Modem 1/0 ACF: State: Idle 6d22h: %LINK-3-UPDOWN: Interface Async33, changed state to down 6d22h: TTY66: timer type 1 expired 6d22h: TTY66: Exec timer (continued)

~ Hi, ~ ~ here's my debug output:

As you figured out, your PAP authentication failed:

~ d22h: As40 PAP: I AUTH-REQ id 28 len 15 from "test" ~ 6d22h: As40 PAP: Authenticating peer test ~ 6d22h: AAA/AUTHEN/PPP (000000C7): Pick method list 'default' ~ 6d22h: As40 PPP: Sent PAP LOGIN Request ~ 6d22h: As40 PPP: Received LOGIN Response FAIL ~ 6d22h: As40 PAP: O AUTH-NAK id 28 len 10 msg is "E=691"

~ I'm really puzzled as to my pap authentication fails?

I didn't see in your configuration where you'd configured the username/password for your PAP peer "test". I only saw "dialin".

Aaron

oops...sorry, i changed the username/password from "dialin" to "test" just to make sure that my username/password combination was not the problem...but unfortunately, it still is....(pap or even chap authentication fails)