MSR做l2tp 的LNS端时,LCP重协商出现不通过的经验案例
一、 组网:
二、 问题描述:
如图所示,LAC在运营商侧,LNS是我司的MSR设备,客户验证的用户名和密码在radius服务器上,并且服务器在LNS侧,VPN user是用我司的MSR路由器3G拨号,从VPN user处连接l2tp vpn发现拨号不成功。
三、 过程分析:
因为client端和LNS端都是我司的MSR设备,所以可以从设备上进行抓包分析查看可能的原因;
Client端的设备处抓包:
<client>
%Jan 1 02:28:43:286 2007 client IFNET/3/LINK_UPDOWN: Cellular1/0 link status is UP.
*Jan 1 02:28:43:288 2007 client PPP/7/debug2:
PPP Event:
Cellular1/0 LCP Open Event
state initial
*Jan 1 02:28:43:289 2007 client PPP/7/debug2:
PPP State Change:
Cellular1/0 LCP : initial --> starting
*Jan 1 02:28:43:289 2007 client PPP/7/debug2:
PPP Event:
Cellular1/0 LCP Lower Up Event
state starting
*Jan 1 02:28:43:290 2007 client PPP/7/debug2:
PPP State Change:
Cellular1/0 LCP : starting --> reqsent
*Jan 1 02:28:43:291 2007 client PPP/7/debug2:
PPP Packet:
Cellular1/0 Output LCP(c021) Pkt, Len 24
State reqsent, code ConfReq(01), id 75, len 20
MRU(1), len 4, val 05b4
ACCMAP(2), len 6, val 00000000
MagicNumber(5), len 6, val 0087d2e5
*Jan 1 02:28:43:837 2007 client PPP/7/debug2:
PPP Packet:
Cellular1/0 Input LCP(c021) Pkt, Len 33
State reqsent, code ConfReq(01), id 0, len 29
MRU(1), len 4, val 0564
ACCMAP(2), len 6, val 00000000
AuthProto(3), len 5, CHAP c22305
MagicNumber(5), len 6, val b253bd72
PFC(7), len 2,
ACFC(8), len 2,
*Jan 1 02:28:43:837 2007 client PPP/7/debug2:
PPP Event:
Cellular1/0 LCP RCR+(Receive Config Good Request) Event
state reqsent
*Jan 1 02:28:43:838 2007 client PPP/7/debug2:
PPP Packet:
Cellular1/0 Output LCP(c021) Pkt, Len 33
State reqsent, code ConfAck(02), id 0, len 29
MRU(1), len 4, val 0564
ACCMAP(2), len 6, val 00000000
AuthProto(3), len 5, CHAP c22305
MagicNumber(5), len 6, val b253bd72
PFC(7), len 2,
ACFC(8), len 2,
*Jan 1 02:28:43:839 2007 client PPP/7/debug2:
PPP State Change:
Cellular1/0 LCP : reqsent --> acksent
%Jan 1 02:28:43:896 2007 client IFNET/5/LINEPROTO_UPDOWN: Line protocol on the interface Cellular1/0 is UP.
*Jan 1 02:28:43:897 2007 client PPP/7/debug2:
PPP Packet:
Cellular1/0 Input LCP(c021) Pkt, Len 24
State acksent, code ConfAck(02), id 75, len 20
MRU(1), len 4, val 05b4
ACCMAP(2), len 6, val 00000000
MagicNumber(5), len 6, val 0087d2e5
*Jan 1 02:28:43:897 2007 client PPP/7/debug2:
PPP Event:
Cellular1/0 LCP RCA(Receive Config Ack) Event
state acksent
*Jan 1 02:28:43:898 2007 client PPP/7/debug2:
PPP Event:
Cellular1/0 : PPP Notify low layer to send remote accm ffffffff , local accm ffffffff Packet
*Jan 1 02:28:43:899 2007 client PPP/7/debug2:
PPP State Change:
Cellular1/0 LCP : acksent --> opened
*Jan 1 02:28:43:899 2007 client PPP/7/debug2:
PPP Event:
Cellular1/0 : PPP Notify low layer to send remote accm 0 , local accm 0 Packet
*Jan 1 02:28:43:900 2007 client PPP/7/debug2:
PPP Event:
Cellular1/0 CHAP Initial Event
state Initial
*Jan 1 02:28:43:901 2007 client PPP/7/debug2:
PPP Event:
Cellular1/0 CHAP Client Lower Up Event
state Initial
*Jan 1 02:28:43:901 2007 client PPP/7/debug2:
PPP State Change:
Cellular1/0 CHAP : Initial --> ListenChallenge
*Jan 1 02:28:44:055 2007 client PPP/7/debug2:
PPP Packet:
Cellular1/0 Input CHAP(c223) Pkt, Len 34
State ListenChallenge, code Challenge(01), id 1, len 30
Value_Size: 16 Value: c2 da e3 92 cd cf e0 40 6d cd 19 15 60 52 f6 bb
Name: BJTELECOM
*Jan 1 02:28:44:055 2007 client PPP/7/debug2:
PPP Event:
Cellular1/0 CHAP Receive Challenge Event
state ListenChallenge
*Jan 1 02:28:44:056 2007 client PPP/7/debug2:
PPP Packet:
Cellular1/0 Output CHAP(c223) Pkt, Len 42
State ListenChallenge, code Response(02), id 1, len 38
Value_Size: 16 Value: 95 1a de 1c 2 d5 cd 11 b9 f6 31 6c 4 3b f8 46
Name: Zh61@ZHYL.vpdn.bj
*Jan 1 02:28:44:057 2007 client PPP/7/debug2:
PPP State Change:
Cellular1/0 CHAP : ListenChallenge --> SendResponse
*Jan 1 02:28:47:053 2007 client PPP/7/debug2:
PPP Event:
Cellular1/0 CHAP Response TimeOut Event
state SendResponse , Retransmit 1
*Jan 1 02:28:47:054 2007 client PPP/7/debug2:
PPP Error:
Cellular1/0 CHAP : Send response No. 1 !
*Jan 1 02:28:47:055 2007 client PPP/7/debug2:
PPP Packet:
Cellular1/0 Output CHAP(c223) Pkt, Len 42
State SendResponse, code Response(02), id 1, len 38
Value_Size: 16 Value: 95 1a de 1c 2 d5 cd 11 b9 f6 31 6c 4 3b f8 46
Name: Zh61@ZHYL.vpdn.bj
%Jan 1 02:28:47:396 2007 client IFNET/5/LINEPROTO_UPDOWN: Line protocol on the interface Cellular1/0 is DOWN.
*Jan 1 02:28:47:397 2007 client PPP/7/debug2:
PPP Packet:
Cellular1/0 Input LCP(c021) Pkt, Len 8
State opened, code TermReq(05), id 1, len 4
*Jan 1 02:28:47:397 2007 client PPP/7/debug2:
PPP Event:
Cellular1/0 LCP RTR(Receive Terminate Request) Event
state opened
*Jan 1 02:28:47:398 2007 client PPP/7/debug2:
PPP State Change:
Cellular1/0 LCP : opened --> stopping
*Jan 1 02:28:47:399 2007 client PPP/7/debug2:
PPP Packet:
Cellular1/0 Output LCP(c021) Pkt, Len 8
State stopping, code TermAck(06), id 1, len 4
*Jan 1 02:28:47:399 2007 client PPP/7/debug2:
PPP Event:
Cellular1/0 : PPP_LQM_LOWERDOWN Delete AllowSendLQR Timer
*Jan 1 02:28:47:400 2007 client PPP/7/debug2:
PPP Event:
Cellular1/0 CHAP Lower Down Event
state SendResponse
*Jan 1 02:28:47:401 2007 client PPP/7/debug2:
PPP State Change:
Cellular1/0 CHAP : SendResponse --> Initial
*Jan 1 02:28:47:401 2007 client PPP/7/debug2:
PPP Event:
Cellular1/0 : PPP Clear Netpkt Statistics error!!
%Jan 1 02:28:50:394 2007 client IFNET/3/LINK_UPDOWN: Cellular1/0 link status is DOWN.
*Jan 1 02:28:50:395 2007 client PPP/7/debug2:
PPP Event:
Cellular1/0 LCP TO-(Timeout with counter expired) Event
state stopping
*Jan 1 02:28:50:395 2007 client PPP/7/debug2:
PPP State Change:
Cellular1/0 LCP : stopping --> stopped
从client端的debug ppp信息来看,客户端收到的terminal信息,这是客户端验证失败的信息。
LNS端收集的debug ppp信息:
*Jan 1 05:52:59:604 2007 LNS PPP/7/debug2:
PPP State Change:
Virtual-Template0:0 LCP : initial --> reqsent
*Jan 1 05:52:59:755 2007 LNS PPP/7/debug2:
PPP Event:
Virtual-Template0:0 : LCP prenegotiate failed
*Jan 1 05:52:59:856 2007 LNS PPP/7/debug2:
PPP Event:
Virtual-Template0:0 LCP Close Event
state reqsent
*Jan 1 05:53:00:006 2007 LNS PPP/7/debug2:
PPP State Change:
Virtual-Template0:0 LCP : reqsent --> closing
*Jan 1 05:53:00:107 2007 LNS PPP/7/debug2:
PPP Packet:
Virtual-Template0:0 Output LCP(c021) Pkt, Len 8
State closing, code TermReq(05), id 0, len 4
*Jan 1 05:53:00:861 2007 LNS PPP/7/debug2:
PPP Event:
Virtual-Template0:0 LCP TO+(Timeout with counter > 0) Event
state closing , Retransmit = 2
*Jan 1 05:53:00:961 2007 LNS PPP/7/debug2:
PPP Packet:
Virtual-Template0:0 Output LCP(c021) Pkt, Len 8
State closing, code TermReq(05), id 1, len 4
*Jan 1 05:53:02:568 2007 LNS PPP/7/debug2:
PPP Packet:
Virtual-Template0:0 Input LCP(c021) Pkt, Len 8
State closing, code TermAck(06), id 1, len 4
*Jan 1 05:53:02:668 2007 LNS PPP/7/debug2:
PPP Event:
Virtual-Template0:0 LCP RTA(Receive Terminate Ack) Event
state closing
*Jan 1 05:53:02:769 2007 LNS PPP/7/debug2:
PPP State Change:
Virtual-Template0:0 LCP : closing --> closed
四、 解决方法:
从LNS端的debug ppp信息可以看到,lcp的协商没有通过,此时可以在LNS端配置mandatory-lcp.
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作