No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

PPPoE Authentication Fails on the Terminals Connected to an ME60 Issue Description

Publication Date:  2019-04-07 Views:  153 Downloads:  0

Issue Description

After PPP authentication is configured on the BAS interface, terminal dialup fails, and the error code is 619.

Handling Process

1. Check device configurations. It is found that the user access mode is PPP Web authentication.

#

interface GigabitEthernet1/0/1.48

 pppoe-server bind Virtual-Template 1

 description zmyr-yfl

 user-vlan 31

 remote-backup-profile rpb1

 bas

 #

  access-type layer2-subscriber default-domain pre-authentication zmyrzqy-yfl authentication zmyrzhy-yfl

  authentication-method ppp web

 #

2. Test the account and password on the ME60. It is found that the account and password are correct.

<QH-JZXY-ME60-2>test-aaa test3 123 radius-group wx-radius 

<QH-JZXY-ME60-2>

Info: Account test succeed!

3. During terminal dialup, trace the terminal's MAC address on the ME60. The following information is printed repeatedly. It is found that the IP address 10.1.159.254 maps the terminal's MAC address.

[QH-JZXY-ME60-2]trace access-user object 1 mac-address 3C97-0EFA-271C

[QH-JZXY-ME60-2]

Mar 11 2018 11:25:36.990.2 QH-JZXY-ME60-2 BTRC/7/BTRC_TraceInfo:[objectID=1][slotID=1][SRVCFG][user info:

  MAC Address    : 3C97-0EFA-271C

  IP Address     : 10.1.159.254 

  Interface      : GigabitEthernet1/0/1.2]

[trace info:

[BRAS DEBUG] BAS_Transmit Out : RUI Configed!]

 

[QH-JZXY-ME60-2]

Mar 11 2018 11:25:36.990.3 QH-JZXY-ME60-2 BTRC/7/BTRC_TraceInfo:[objectID=1][slotID=1][SRVCFG][user info:

  MAC Address    : 3C97-0EFA-271C

  IP Address     : 10.1.159.254 

  Interface      : GigabitEthernet1/0/1.2]

[trace info:BAS_Transmit Out: TS_Send OK!]

4. Check that the IP address 10.1.159.254 is allocated by the web authentication address pool.

#

ip pool youxian-yifulourenzhengqian bas local rui-slave

 gateway 10.1.152.1 255.255.248.0

 # LOCAL

   section 0 10.1.152.2 10.1.159.254      

 excluded-ip-address 10.1.152.2 10.1.152.100

 # REMOTE

 dns-server 202.100.138.68 202.100.128.68

#

 domain zmyrzqy-yfl

  authentication-scheme noauth

  accounting-scheme noacc                 

  ip-pool zmyrzq-yfl

  radius-server group pppoe-radius

  user-group youxian

  web-server 10.3.3.1

  web-server url http://10.3.3.1:8080/Self

  portal-server 10.3.3.1

5. Check the related document. The related description is as follows:

The authentication mode configured on the interface is PPP Web authentication. Therefore, when a user applies for an IP address through PPPoE, an IP address has been assigned to the MAC address through an IPoE packet. During PPPoE service check based on MAC addresses, it is found that the MAC address has already mapped to an IP address. Therefore, IP address application fails.

Run the mac-user ppp-preferred command in the AAA view. This command is designed to allow PPPoE users go online preferentially over IPoE users.

Root Cause

When both PPP authentication and web authentication are configured, web authentication is preferentially implemented to obtain an IP address. During IP address obtaining through PPP authentication, because the device detects that an IP address has been assigned to the terminal based on the MAC address, no IP address is allocated again. Therefore, PPP authentication fails.

Solution

Run the mac-user ppp-preferred command in the AAA view. This command is designed to allow PPPoE users go online preferentially over IPoE users.

END