MultiLink issue on AS5300

Hello, I have an AS5300 on which I can not get windows 2000 machines to connect unless I uncheck "Negotiate PPP Multilink on single-link connections". I have gone over the config but can not find anything staring at me as wrong. Can anyone offer advice? Below is my config:

Current configuration : 7610 bytes ! version 12.2 service timestamps debug uptime service timestamps log uptime service password-encryption ! hostname "AS5300" ! boot system flash c5300-is-mz.120-7.T.bin no logging console enable secret 5 enable password 7 ! username username spe 1/0 1/7 firmware location system:/ucode/mica_port_firmware spe 2/0 2/7 firmware location system:/ucode/mica_port_firmware ! ! resource-pool disable ! modem country mica usa aaa new-model ! ! aaa authentication login SECURE group radius enable aaa authentication login CONSOLE local aaa authentication login AUX group radius enable aaa authentication login vty line aaa authentication login VTY line aaa authentication ppp default if-needed group radius local aaa authentication ppp enable group radius aaa authentication ppp radius group radius aaa authorization exec default group radius if-authenticated aaa authorization network default group radius if-authenticated aaa accounting exec default start-stop group radius aaa accounting network default start-stop group radius aaa session-id common ip subnet-zero ip domain name ip name-server ip name-server ! multilink virtual-template 1 async-bootp dns-server ! isdn switch-type primary-5ess isdn voice-call-failure 0 modemcap entry mica2730:MSC=&F&D2s34=18000s40=10s54=456debugthismodems71=4 ! controller T1 0 framing esf clock source line primary linecode b8zs no yellow generation no yellow detection ds0-group 0 timeslots 1-24 type e&m-fgb mf ! controller T1 1 framing esf clock source line secondary 1 linecode b8zs no yellow generation no yellow detection ds0-group 0 timeslots 1-24 type e&m-fgb mf ! controller T1 2 framing esf clock source line secondary 2 linecode b8zs no yellow generation no yellow detection ds0-group 0 timeslots 1-24 type e&m-fgb mf ! controller T1 3 framing esf clock source line secondary 3 linecode b8zs no yellow generation no yellow detection ds0-group 0 timeslots 1-24 type e&m-fgb mf ! controller T1 4 framing esf linecode b8zs no yellow generation no yellow detection ds0-group 0 timeslots 1-24 type e&m-fgb mf ! controller T1 5 framing esf linecode b8zs no yellow generation no yellow detection ds0-group 0 timeslots 1-24 type e&m-fgb mf ! controller T1 6 framing esf linecode b8zs no yellow generation no yellow detection ds0-group 0 timeslots 1-24 type e&m-fgb mf ! controller T1 7 framing esf linecode b8zs no yellow generation no yellow detection ds0-group 0 timeslots 1-24 type e&m-fgb mf ! ! ! interface Ethernet0 no ip address shutdown no cdp enable ! interface Virtual-Template1 ip unnumbered FastEthernet0 peer default ip address pool pool0 compress mppc ppp pfc remote ignore ppp acfc remote ignore ppp authentication chap ppp multilink ! interface Serial0 no ip address clockrate 2015232 no fair-queue no cdp enable ! interface Serial1 no ip address clockrate 2015232 no fair-queue no cdp enable ! interface Serial2 no ip address clockrate 2015232 no fair-queue no cdp enable ! interface Serial3 no ip address shutdown clockrate 2015232 no fair-queue no cdp enable ! interface FastEthernet0 ip address 255.255.255.240 duplex auto speed auto arp timeout 1800 no cdp enable ! interface Group-Async1 ip unnumbered FastEthernet0 ip access-group 105 in ip access-group 105 out encapsulation ppp no ip mroute-cache dialer in-band dialer idle-timeout 1800 dialer-group 1 async dynamic address async dynamic routing async mode interactive peer default ip address pool pool0 compress mppc no fair-queue ppp pfc remote ignore ppp acfc remote ignore ppp authentication chap pap ppp multilink group-range 1 192 ! interface Dialer1 ip unnumbered FastEthernet0 encapsulation ppp no ip mroute-cache dialer in-band dialer idle-timeout 36000 dialer-group 1 peer default ip address pool pool0 no fair-queue no cdp enable ppp authentication chap pap ppp multilink ! ip local pool pool0 .1 .254 ip default-gateway ip classless ip route 0.0.0.0 0.0.0.0 FastEthernet0 no ip http server ! ! ! no logging trap access-list 1 permit log access-list 1 permit 0.0.0.255 log access-list 1 deny any log access-list 99 permit access-list 105 deny udp any any eq tftp access-list 105 deny tcp any any eq 135 access-list 105 deny udp any any eq 135 access-list 105 deny tcp any any eq 137 access-list 105 deny udp any any eq netbios-ns access-list 105 deny tcp any any eq 138 access-list 105 deny udp any any eq netbios-dgm access-list 105 deny tcp any any eq 139 access-list 105 deny udp any any eq netbios-ss access-list 105 deny tcp any any eq 445 access-list 105 deny udp any any eq 445 access-list 105 deny tcp any any eq 593 access-list 105 deny tcp any any eq 901 access-list 105 deny tcp any any eq 996 access-list 105 deny tcp any any eq 997 access-list 105 deny tcp any any eq 998 access-list 105 deny tcp any any eq 999 access-list 105 deny udp any any eq 1434 access-list 105 deny tcp any any eq 2741 access-list 105 deny tcp any any eq 2745 access-list 105 deny tcp any any eq 3127 access-list 105 deny udp any any eq 3127 access-list 105 deny tcp any any eq 3198 access-list 105 deny udp any any eq 3198 access-list 105 deny tcp any any eq 4444 access-list 105 deny tcp any any eq 8998 access-list 105 deny tcp any any eq 5554 access-list 105 deny tcp any any eq 9996 access-list 105 permit ip any any dialer-list 1 protocol ip permit dialer-list 1 protocol netbios deny no cdp run snmp-server engineID local 00000009020000D0BA802FCA snmp-server community RO snmp-server enable traps tty radius-server host auth-port 1645 acct-port 1646 radius-server host auth-port 1645 acct-port 1646 radius-server host auth-port 1645 acct-port 1646 radius-server key 7 radius-server authorization permit missing Service-Type banner motd ^C

*********************************************************************

W A R N I N G

This network device is the private property of .

Unauthorized access is strictly prohibited and subject to prosecution under international, state, federal and local statutes. This device is subject to monitoring. If you are unauthorized or do not consent to monitoring of your usage by - DISCONNECT NOW!

*********************************************************************

^C ! line con 0 password 7 logging synchronous login authentication CONSOLE line 1 192 no flush-at-activation modem InOut modem autoconfigure type mica2730 rotary 1 transport input all autoselect during-login autoselect ppp line aux 0 line vty 0 4 access-class 1 in password 7 login authentication VTY transport input telnet ! end

Reply to
Matt
Loading thread data ...

Debug from the as5300 shows me what is below.. why is it removing the bundle?:

17w6d: As93 LCP: Lower layer not up, Fast Starting 17w6d: As93 PPP: Using dialer call direction 17w6d: As93 PPP: Treating connection as a callin 17w6d: As93 PPP: Authorization required 17w6d: %LINK-3-UPDOWN: Interface Async93, changed state to up 17w6d: As93 CHAP: O CHALLENGE id 143 len 36 from "AS5300" 17w6d: As93 CHAP: I RESPONSE id 143 len 29 from "showroom" 17w6d: As93 PPP: Sent CHAP LOGIN Request 17w6d: As93 PPP: Received LOGIN Response PASS 17w6d: As93 CHAP: O SUCCESS id 143 len 4 17w6d: As93 MLP: Request add link to bundle 17w6d: As93 MLP: Adding link to bundle 17w6d: Vi8 MLP: VP: Clone from Vtemplate 1 block=0 17w6d: Vi8 MLP: VP: Clone from AAA 17w6d: %LINK-3-UPDOWN: Interface Virtual-Access8, changed state to up 17w6d: Vi8 MLP: Added first link As93 to bundle showroom 17w6d: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access8, changed state to up 17w6d: %LINK-5-CHANGED: Interface Async93, changed state to reset 17w6d: As93 MLP: Request drop link from bundle Vi8 17w6d: Vi8 MLP: Removing link As93 from bundle showroom 17w6d: Vi8 MLP: Dropped link As93 from bundle showroom 17w6d: Vi8 MLP: Dropped last link, removing bundle showroom 17w6d: Vi8 MLP: Removing bundle 'showroom' 17w6d: showroom MLP: Link protocol down, BAP not present on Vi8 17w6d: Vi8 MLP: Bundle 'showroom' reset 17w6d: %LINK-3-UPDOWN: Interface Virtual-Access8, changed state to down 17w6d: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access8, changed state to down
Reply to
Matt

do "debug ppp negotiation", and "debug aaa authentication" and see what you get.

Scott

Reply to
thrill5

~ Hello, ~ I have an AS5300 on which I can not get windows 2000 machines to connect ~ unless I uncheck "Negotiate PPP Multilink on single-link connections". ~ I have gone over the config but can not find anything staring at me as ~ wrong. Can anyone offer advice? Below is my config:

It looks like the way that you've configured things is such that multilink users will use a virtual profile that's cloned from virtual-template 1 while the non-MLPPP users will use a physical async interface configured per group-async1.

I haven't done a line by line comparison of virtual-template1 vs. group-async1, but there must be something different there.

You can use the following debugs to see what's going on wrong in the vprofile case:

debug ppp negotiation debug aaa authentication debug aaa authorization debug radius debug vprofile debug vtemplate event

Capture the debugs from a given client dialing in with MLPPP disabled, then get debugs from the same client with MLPPP enabled, and see what's going on wrong in the latter case.

Cheers,

Aaron

Reply to
Aaron Leonard

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.