ppp & Cisco

I have problems connecting to a Cisco machine.
I'm using kppp & kinternet with SuSE 9.2.
My PPP to other machines works OK.

The only thing I know about the machine(Cisco)is that it is from 1999.


Log from kppp:

Jan 10 21:31:30 davai pppd[14225]: Connect: ppp0 <--> /dev/ttyS0
Jan 10 21:31:30 davai pppd[14225]: sent [LCP ConfReq id=0x1 <asyncmap
0xa0000> <magic 0x96028c1e> <pcomp> <accomp>]
Jan 10 21:31:38 davai pppd[14225]: rcvd [LCP ConfReq id=0x1 <asyncmap
0xa0000> <auth chap MD5> <magic 0xe26d6dee> <pcomp> <accomp>]
Jan 10 21:31:38 davai pppd[14225]: sent [LCP ConfAck id=0x1 <asyncmap
0xa0000> <auth chap MD5> <magic 0xe26d6dee> <pcomp> <accomp>]
Jan 10 21:31:40 davai pppd[14225]: sent [LCP ConfReq id=0x1 <asyncmap
0xa0000> <magic 0x96028c1e> <pcomp> <accomp>]
Jan 10 21:31:42 davai pppd[14225]: sent [LCP ConfReq id=0x1 <asyncmap
0xa0000> <magic 0x96028c1e> <pcomp> <accomp>]
Jan 10 21:31:42 davai pppd[14225]: rcvd [LCP ConfAck id=0x1 <asyncmap
0xa0000> <magic 0x96028c1e> <pcomp> <accomp>]
Jan 10 21:31:42 davai pppd[14225]: sent [LCP EchoReq id=0x0
magic=0x96028c1e]
Jan 10 21:31:44 davai pppd[14225]: rcvd [LCP ConfReq id=0x3 <asyncmap
0xa0000> <auth chap MD5> <magic 0xe26d7d2b> <pcomp> <accomp>]
Jan 10 21:31:44 davai pppd[14225]: sent [LCP ConfReq id=0x2 <asyncmap
0xa0000> <magic 0xa096b8ee> <pcomp> <accomp>]
Jan 10 21:31:44 davai pppd[14225]: sent [LCP ConfAck id=0x3 <asyncmap
0xa0000> <auth chap MD5> <magic 0xe26d7d2b> <pcomp> <accomp>]
Jan 10 21:31:44 davai pppd[14225]: rcvd [LCP ConfAck id=0x2 <asyncmap
0xa0000> <magic 0xa096b8ee> <pcomp> <accomp>]
Jan 10 21:31:44 davai pppd[14225]: sent [LCP EchoReq id=0x0
magic=0xa096b8ee]
Jan 10 21:31:44 davai pppd[14225]: rcvd [CHAP Challenge id=0x2
<fefd355570a11f8c9c36802b5d05da81>, name = "XXXXX"]
Jan 10 21:31:44 davai pppd[14225]: sent [CHAP Response id=0x2
<31ccfd6b48c152e4af4975beb0280957>, name = "XXXXX"]
Jan 10 21:31:44 davai pppd[14225]: rcvd [LCP EchoRep id=0x0
magic=0xe26d7d2b]
Jan 10 21:31:44 davai pppd[14225]: rcvd [CHAP Success id=0x2 ""]
Jan 10 21:31:44 davai pppd[14225]: CHAP authentication succeeded
Jan 10 21:31:44 davai pppd[14225]: sent [CCP ConfReq id=0x1 <deflate
15> <deflate(old#) 15> <bsd v1 15>]
Jan 10 21:31:44 davai pppd[14225]: sent [IPCP ConfReq id=0x1 <compress
VJ 0f 01> <addr 171.16.1.205>]
Jan 10 21:31:44 davai pppd[14225]: rcvd [IPCP ConfReq id=0x1 <addr
171.16.1.1>]
Jan 10 21:31:44 davai pppd[14225]: sent [IPCP ConfAck id=0x1 <addr
171.16.1.1>]
Jan 10 21:31:44 davai pppd[14225]: rcvd [proto=0x8207] 01 01 00 04
Jan 10 21:31:44 davai pppd[14225]: Unsupported protocol 0x8207
received
Jan 10 21:31:44 davai pppd[14225]: sent [LCP ProtRej id=0x3 82 07 01
01 00 04]
Jan 10 21:31:44 davai pppd[14225]: rcvd [LCP ProtRej id=0x4 80 fd 01
01 00 0f 1a 04 78 00 18 04 78 00 15 03 2f]
Jan 10 21:31:47 davai pppd[14225]: rcvd [IPCP ConfReq id=0x2 <addr
171.16.1.1>]
Jan 10 21:31:47 davai pppd[14225]: sent [IPCP ConfAck id=0x2 <addr
171.16.1.1>]
Jan 10 21:31:47 davai pppd[14225]: rcvd [proto=0x8207] 01 02 00 04
Jan 10 21:31:47 davai pppd[14225]: Unsupported protocol 0x8207
received
Jan 10 21:31:47 davai pppd[14225]: sent [LCP ProtRej id=0x4 82 07 01
02 00 04]
Jan 10 21:31:47 davai pppd[14225]: sent [IPCP ConfReq id=0x1 <compress
VJ 0f 01> <addr 171.16.1.205>]
Jan 10 21:31:49 davai pppd[14225]: rcvd [IPCP ConfReq id=0x3 <addr
171.16.1.1>]
Jan 10 21:31:49 davai pppd[14225]: sent [IPCP ConfAck id=0x3 <addr
171.16.1.1>]
Jan 10 21:31:49 davai pppd[14225]: rcvd [proto=0x8207] 01 03 00 04
Jan 10 21:31:49 davai pppd[14225]: Unsupported protocol 0x8207
received
Jan 10 21:31:49 davai pppd[14225]: sent [LCP ProtRej id=0x5 82 07 01
03 00 04]
Jan 10 21:31:50 davai pppd[14225]: sent [IPCP ConfReq id=0x1 <compress
VJ 0f 01> <addr 171.16.1.205>]
Jan 10 21:31:51 davai pppd[14225]: rcvd [IPCP ConfReq id=0x4 <addr
171.16.1.1>]
Jan 10 21:31:51 davai pppd[14225]: sent [IPCP ConfAck id=0x4 <addr
171.16.1.1>]
Jan 10 21:31:51 davai pppd[14225]: rcvd [proto=0x8207] 01 04 00 04
Jan 10 21:31:51 davai pppd[14225]: Unsupported protocol 0x8207
received
Jan 10 21:31:51 davai pppd[14225]: sent [LCP ProtRej id=0x6 82 07 01
04 00 04]
Jan 10 21:31:53 davai pppd[14225]: rcvd [IPCP ConfRej id=0x1 <compress
VJ 0f 01> <addr 171.16.1.205>]
Jan 10 21:31:53 davai pppd[14225]: sent [IPCP ConfReq id=0x2 <addrs
171.16.1.205 171.16.1.1>]
Jan 10 21:31:53 davai pppd[14225]: rcvd [IPCP ConfReq id=0x5 <addr
171.16.1.1>]
Jan 10 21:31:53 davai pppd[14225]: sent [IPCP ConfAck id=0x5 <addr
171.16.1.1>]
Jan 10 21:31:55 davai pppd[14225]: rcvd [IPCP ConfReq id=0x6 <addr
171.16.1.1>]
Jan 10 21:31:55 davai pppd[14225]: sent [IPCP ConfAck id=0x6 <addr
171.16.1.1>]
Jan 10 21:31:56 davai pppd[14225]: sent [IPCP ConfReq id=0x2 <addrs
171.16.1.205 171.16.1.1>]
Jan 10 21:31:57 davai pppd[14225]: rcvd [IPCP ConfReq id=0x7 <addr
171.16.1.1>]
Jan 10 21:31:57 davai pppd[14225]: sent [IPCP ConfAck id=0x7 <addr
171.16.1.1>]
Jan 10 21:31:59 davai pppd[14225]: sent [IPCP ConfReq id=0x2 <addrs
171.16.1.205 171.16.1.1>]
Jan 10 21:31:59 davai pppd[14225]: rcvd [IPCP ConfReq id=0x8 <addr
171.16.1.1>]
Jan 10 21:31:59 davai pppd[14225]: sent [IPCP ConfAck id=0x8 <addr
171.16.1.1>]
Jan 10 21:32:01 davai pppd[14225]: rcvd [IPCP ConfRej id=0x1 <compress
VJ 0f 01> <addr 171.16.1.205>]
Jan 10 21:32:01 davai pppd[14225]: rcvd [IPCP ConfReq id=0x9 <addr
171.16.1.1>]
Jan 10 21:32:01 davai pppd[14225]: sent [IPCP ConfAck id=0x9 <addr
171.16.1.1>]
Jan 10 21:32:02 davai pppd[14225]: sent [IPCP ConfReq id=0x2 <addrs
171.16.1.205 171.16.1.1>]
Jan 10 21:32:03 davai pppd[14225]: rcvd [IPCP ConfReq id=0xa <addr
171.16.1.1>]
Jan 10 21:32:03 davai pppd[14225]: sent [IPCP ConfAck id=0xa <addr
171.16.1.1>]
Jan 10 21:32:05 davai pppd[14225]: sent [IPCP ConfReq id=0x2 <addrs
171.16.1.205 171.16.1.1>]
Jan 10 21:32:05 davai pppd[14225]: rcvd [IPCP ConfReq id=0xb <addr
171.16.1.1>]
Jan 10 21:32:05 davai pppd[14225]: sent [IPCP ConfAck id=0xb <addr
171.16.1.1>]
Jan 10 21:32:08 davai pppd[14225]: sent [IPCP ConfReq id=0x2 <addrs
171.16.1.205 171.16.1.1>]
Jan 10 21:32:09 davai pppd[14225]: rcvd [IPCP ConfRej id=0x1 <compress
VJ 0f 01> <addr 171.16.1.205>]
Jan 10 21:32:11 davai pppd[14225]: sent [IPCP ConfReq id=0x2 <addrs
171.16.1.205 171.16.1.1>]
Jan 10 21:32:14 davai pppd[14225]: sent [IPCP ConfReq id=0x2 <addrs
171.16.1.205 171.16.1.1>]
Jan 10 21:32:14 davai pppd[14225]: sent [LCP EchoReq id=0x1
magic=0xa096b8ee]
Jan 10 21:32:17 davai pppd[14225]: sent [IPCP ConfReq id=0x2 <addrs
171.16.1.205 171.16.1.1>]
Jan 10 21:32:17 davai pppd[14225]: rcvd [IPCP ConfRej id=0x2 <addrs
171.16.1.205 171.16.1.1>]
Jan 10 21:32:17 davai pppd[14225]: sent [IPCP ConfReq id=0x3 <addrs
171.16.1.205 171.16.1.1>]
Jan 10 21:32:26 davai pppd[14225]: rcvd [IPCP ConfRej id=0x2 <addrs
171.16.1.205 171.16.1.1>]
Jan 10 21:32:26 davai pppd[14225]: sent [IPCP ConfReq id=0x3 <addrs
171.16.1.205 171.16.1.1>]
Jan 10 21:32:29 davai pppd[14225]: sent [IPCP ConfReq id=0x3 <addrs
171.16.1.205 171.16.1.1>]
Jan 10 21:32:30 davai pppd[14225]: Terminating on signal 15.
Jan 10 21:32:30 davai pppd[14225]: sent [LCP TermReq id=0x7 "User
request"]
Jan 10 21:32:32 davai pppd[14225]: sent [LCP TermReq id=0x8 "User
request"]
Jan 10 21:32:34 davai pppd[14225]: rcvd [IPCP ConfRej id=0x2 <addrs
171.16.1.205 171.16.1.1>]
Jan 10 21:32:34 davai pppd[14225]: Discarded non-LCP packet when LCP
not open
Jan 10 21:32:34 davai pppd[14225]: Connection terminated.
Jan 10 21:32:34 davai pppd[14225]: Exit.

Olle wrote:
> I have problems connecting to a Cisco machine.
> I'm using kppp & kinternet with SuSE 9.2.
> My PPP to other machines works OK.
>
> The only thing I know about the machine(Cisco)is that it is from 1999.
>
>
> Log from kppp:

Upgrade the IOS , i have had the same problem varoius month ago
bye
peppe

Olle <(E-Mail Removed)> wrote:
> I have problems connecting to a Cisco machine.
> I'm using kppp & kinternet with SuSE 9.2.
> My PPP to other machines works OK.

> The only thing I know about the machine(Cisco)is that it is from 1999.

I can only tell you what's happening but not precisely why.

> Log from kppp:
....

> Jan 10 21:31:44 davai pppd[14225]: rcvd [CHAP Success id=0x2 ""]
> Jan 10 21:31:44 davai pppd[14225]: CHAP authentication succeeded

Everything went well up to this point.

> Jan 10 21:31:44 davai pppd[14225]: sent [CCP ConfReq id=0x1 <deflate
> 15> <deflate(old#) 15> <bsd v1 15>]

This is Compression Control Protocol (CCP), used for negotiating
software compression. For Linux it is almost always useless when
the peer uses a commercial PPP implementation since those mostly use
patented CCP algorithms.

> Jan 10 21:31:44 davai pppd[14225]: sent [IPCP ConfReq id=0x1 <compress
> VJ 0f 01> <addr 171.16.1.205>]

This is a request by pppd to use 171.16.1.205 as it's local IP address.
It also includes a request for VJ header compression.

> Jan 10 21:31:44 davai pppd[14225]: rcvd [IPCP ConfReq id=0x1 <addr
> 171.16.1.1>]

This is a request by the peer to use 171.16.1.1 as it's IP address
but without VJ header compression.

> Jan 10 21:31:44 davai pppd[14225]: sent [IPCP ConfAck id=0x1 <addr
> 171.16.1.1>]
> Jan 10 21:31:44 davai pppd[14225]: rcvd [proto=0x8207] 01 01 00 04

This is a request to use Cisco Discovery Protocol (CDP)...

> Jan 10 21:31:44 davai pppd[14225]: Unsupported protocol 0x8207
> received
> Jan 10 21:31:44 davai pppd[14225]: sent [LCP ProtRej id=0x3 82 07 01
> 01 00 04]

....which Linux doesn't support and so it's rejected. I'm not familiar
with CDP.

> Jan 10 21:31:44 davai pppd[14225]: rcvd [LCP ProtRej id=0x4 80 fd 01
> 01 00 0f 1a 04 78 00 18 04 78 00 15 03 2f]

The Cisco rejects CCP entirely, something of no significance.

> Jan 10 21:31:47 davai pppd[14225]: rcvd [IPCP ConfReq id=0x2 <addr
> 171.16.1.1>]
> Jan 10 21:31:47 davai pppd[14225]: sent [IPCP ConfAck id=0x2 <addr
> 171.16.1.1>]

Pppd receives a receives a second request for the IP address and agrees
to allow the peer to use it. A lot of useless back and forth follows.
....

> Jan 10 21:31:53 davai pppd[14225]: rcvd [IPCP ConfRej id=0x1 <compress
> VJ 0f 01> <addr 171.16.1.205>]

At this point the peer rejects both pppd IPCP options, the VJ header
compression and the IP address. This is eventually fatal.

> Jan 10 21:31:53 davai pppd[14225]: sent [IPCP ConfReq id=0x2 <addrs
> 171.16.1.205 171.16.1.1>]

Here pppd falls back to the old IP addresses IPCP (addrs), almost always
useless. A lot of similar back and forth follows.
....

> Jan 10 21:32:17 davai pppd[14225]: sent [IPCP ConfReq id=0x2 <addrs
> 171.16.1.205 171.16.1.1>]
> Jan 10 21:32:17 davai pppd[14225]: rcvd [IPCP ConfRej id=0x2 <addrs
> 171.16.1.205 171.16.1.1>]

Here the peer rejects both IP addresses in the IP addresses option.

> Jan 10 21:32:17 davai pppd[14225]: sent [IPCP ConfReq id=0x3 <addrs
> 171.16.1.205 171.16.1.1>]
> Jan 10 21:32:26 davai pppd[14225]: rcvd [IPCP ConfRej id=0x2 <addrs
> 171.16.1.205 171.16.1.1>]
> Jan 10 21:32:26 davai pppd[14225]: sent [IPCP ConfReq id=0x3 <addrs
> 171.16.1.205 171.16.1.1>]
> Jan 10 21:32:29 davai pppd[14225]: sent [IPCP ConfReq id=0x3 <addrs
> 171.16.1.205 171.16.1.1>]
> Jan 10 21:32:30 davai pppd[14225]: Terminating on signal 15.
> Jan 10 21:32:30 davai pppd[14225]: sent [LCP TermReq id=0x7 "User
> request"]

Pppd finally throws in the towel, requesting termination of negotiation.

> Jan 10 21:32:32 davai pppd[14225]: sent [LCP TermReq id=0x8 "User
> request"]
> Jan 10 21:32:34 davai pppd[14225]: rcvd [IPCP ConfRej id=0x2 <addrs
> 171.16.1.205 171.16.1.1>]
> Jan 10 21:32:34 davai pppd[14225]: Discarded non-LCP packet when LCP
> not open
> Jan 10 21:32:34 davai pppd[14225]: Connection terminated.
> Jan 10 21:32:34 davai pppd[14225]: Exit.

I'd guess the Cisco PPP implementation doesn't support the VJ option
at all. The Cisco also might be configured to prevent a remote PPP host
from using an IP address on the Cisco LAN.

You could try the pppd novj option but I'd say there's a only slim
chance that it alone will help.

There also may be a slim chance that assigning a local IP address
to pppd that is not in the subnet of the Cisco LAN would allow PPP
negotiation to complete, e.g., 192.168.0.1. If they complete then
the Cisco and pppd host should be able to communicate.

--
Clifford Kite Email: "echo xvgr_yvahk-(E-Mail Removed)|rot13"
PPP-Q&A links, downloads: http://ckite.no-ip.net/
/* I hear and I forget. I see and I remember. I do and I understand.
--Confucius, 551-479 BC */

In article <(E-Mail Removed) >, Olle wrote:

>I have problems connecting to a Cisco machine.
>I'm using kppp & kinternet with SuSE 9.2.

Not an expert with KPPP, but it's misconfigured.

>Log from kppp:

>Jan 10 21:31:30 davai pppd[14225]: sent [LCP ConfReq id=0x1 <asyncmap
>0xa0000> <magic 0x96028c1e> <pcomp> <accomp>]
>Jan 10 21:31:38 davai pppd[14225]: rcvd [LCP ConfReq id=0x1 <asyncmap
>0xa0000> <auth chap MD5> <magic 0xe26d6dee> <pcomp> <accomp>]
>Jan 10 21:31:38 davai pppd[14225]: sent [LCP ConfAck id=0x1 <asyncmap
>0xa0000> <auth chap MD5> <magic 0xe26d6dee> <pcomp> <accomp>]

>Jan 10 21:31:42 davai pppd[14225]: rcvd [LCP ConfAck id=0x1 <asyncmap
>0xa0000> <magic 0x96028c1e> <pcomp> <accomp>]

LCP hand waving looks OK, though the peer is awfully slow to respond.
I suspect you have the 'passive' option which may not be needed.

>Jan 10 21:31:42 davai pppd[14225]: sent [LCP EchoReq id=0x0
>magic=0x96028c1e]

I see no response to these (RFC1661 says the peer should respond, but I
don't think that's your problem). I'd look at the KPPP options, and remove
the "lcp-echo-interval" option. It _could_ also be hiding in /etc/ppp/options.

>Jan 10 21:31:44 davai pppd[14225]: CHAP authentication succeeded
>Jan 10 21:31:44 davai pppd[14225]: sent [CCP ConfReq id=0x1 <deflate
>15> <deflate(old#) 15> <bsd v1 15>]
>Jan 10 21:31:44 davai pppd[14225]: sent [IPCP ConfReq id=0x1 <compress
>VJ 0f 01> <addr 171.16.1.205>]

Authentication OK - you ask for CCP and that you want to use a specific
IP address. It doesn't reverse resolve, and RIPE seems to be hazy about
it. I think it's S.N.C.F. (the French national railway).

>Jan 10 21:31:44 davai pppd[14225]: rcvd [IPCP ConfReq id=0x1 <addr
>171.16.1.1>]
>Jan 10 21:31:44 davai pppd[14225]: sent [IPCP ConfAck id=0x1 <addr
>171.16.1.1>]

He wants to use 171.16.1.1 without VJ Header compression. You approve

>Jan 10 21:31:44 davai pppd[14225]: rcvd [proto=0x8207] 01 01 00 04
>Jan 10 21:31:44 davai pppd[14225]: Unsupported protocol 0x8207
>received

[compton ~]$ grep 8207 rfcs/ppp-numbers
8207 Cisco Discovery Protocol Control [Sastry]
[compton ~]$

Ignore it. He wants to know if you are using Cisco hardware.

>Jan 10 21:31:44 davai pppd[14225]: sent [LCP ProtRej id=0x3 82 07 01
>01 00 04]
>Jan 10 21:31:44 davai pppd[14225]: rcvd [LCP ProtRej id=0x4 80 fd 01
>01 00 0f 1a 04 78 00 18 04 78 00 15 03 2f]

You told him you don't do "Cisco Discovery Protocol Control" - and he tells
you he doesn't do Compression Control Protocol.

>Jan 10 21:31:53 davai pppd[14225]: rcvd [IPCP ConfRej id=0x1 <compress
>VJ 0f 01> <addr 171.16.1.205>]

Finally, he says "No, you can't use that address, and VJ". This should
stop things.

1. Find and remove the '-echo-interval' option
2. Try adding 'novj' as an option
3. Are you sure that you are supposed to be using 171.16.1.205? If not,
find and remove the '171.16.1.205:' option if you have it, and add
'noipdefault' and 'ipcp-accept-local' options.

You _could_ add 'noccp' as an option, but your daemon and the peer seem
to be handling this correctly, so I wouldn't add it.

I am concerned that the negotiations are taking so long. The time interval
between receiving the CHAP Challenge, and the Success message _suggests_
this is not a communications link problem. You're posting from a Swedish
IP - is there a chance that the '171.16' is a typo for '172.16' (the RFC1918
address block)?

Old guy