Date: Sun, 15 Oct 2000 22:50:33 +0100 (BST) From: Andrew Gordon <arg@arg1.demon.co.uk> To: Luuk van Dijk <Luuk.van.Dijk@xs4all.nl> Cc: freebsd-isdn@freebsd.org Subject: Re: IPCP negotiation stuck in sppp connection setup? Message-ID: <Pine.BSF.4.21.0010152235370.539-100000@server.arg.sj.co.uk> In-Reply-To: <39E9A2D7.7D955AFB@xs4all.nl>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 15 Oct 2000, Luuk van Dijk wrote: > After much experimenting and probing (I'm new to FreeBSD) I got > my Teles 16.3 passive isa card up and running, to the point where > i4b dials in to my provider (xs4all in the Netherlands), agrees on > the authentication, and then just hangs, AFTER the authentication, > but BEFORE i get an IP number assigned. Actually, authentication hasn't finished. > I am using 4.1-RELEASE, and I don't know what other config > details would be relevant. Your ispppcontrol settings are the key information here. > Using tcpdump -i isp0 I get: This tcpdump output is extremely hard to read; apart from anything else, you can't tell which packets are going in which direction. Using ifconfig to set the 'debug' flag on the interface may give more useful debug. > 14:18:24.132082 ID-001 LCP: Configure-Request, Magic-Number=869737524, > Auth-Prot CHAP/MD5 > 0101 000f 0506 33d7 2434 0305 c223 05 One end (A) asks to authenticate with CHAP/MD5. > 14:18:24.667478 ID-001 LCP: Configure-Request, > Magic-Number=1618006389, Auth-Prot PAP > 0101 000e 0506 6070 d175 0304 c023 The other end (B) asks to authenticate with PAP. > 14:18:24.668242 ID-001 LCP: Configure-Ack, Magic-Number=1618006389, > Auth-Prot PAP > 0201 000e 0506 6070 d175 0304 c023 (A) agrees to use PAP. > 14:18:24.670219 ID-001 LCP: Configure-Ack, Magic-Number=869737524, > Auth-Prot CHAP/MD5 > 0201 000f 0506 33d7 2434 0305 c223 05 (B) agrees to use CHAP/MD5 > 14:18:24.670796 ID-002 PAP: Authenticate-Request, Peer-Id=XXX, Passwd=XXXXXXX > 0102 0011 036c 647a 087a 6b68 7732 3030 > 30 Someone (presumably A) sends an authentication request using CHAP. > 14:18:24.702970 ID-002 PAP: Authenticate-Ack > 0202 0033 2e0d 0a53 7461 7274 696e 6720 > 5050 5020 666f 7220 6164 6472 6573 7320 > 3139 342e 3130 392e 3138 342e 3231 390d > 0a0d 0a The other end (B?) acknolwledges. (B) has not yet sent the CHAP/MD5 authenticate request that it promised. > 14:18:24.706216 ID-001 IPCP: IP-Compression-Protocol > 0101 0010 0206 002d 0f00 0306 c26d 0601 Someone has jumped the gun: it is not legal to use IPCP until authentication has completed. > 14:18:27.687753 ID-002 IPCP: IP-Compression-Protocol > 0102 0010 0206 002d 0f00 0306 c26d 0601 And they keep on trying; the other end doesn't bother to reply as this is a protocol violation. > ------------------------------ > > etcetera, until the kernel says isp0: lcp down(opened), phase terminate, > down event(carrier loss) which probably meant the other side hung up. > > Maybe xs4all is not prepared to negotiate over compression protocols, if > so, how do I disable this? It's nothing to do with compression protocols. Things have already gone wrong by now. > > Any clues? My guess is that (A) is the FreeBSD end, and (B) is the ISP. Further, I suspect that the ISP does not expect to authenticate itself to callers, and their implementation is just plain broken about this. Do you have "hisauthproto=none" in your ispppcontrol settings? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isdn" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0010152235370.539-100000>