|
|
[ gaganed @ 14.05.2008. 12:26 ] @
|
| Imam problem, trebam da konfigurisem Cisco ADSL router na Telekomovu ADSL liniju.
Imam staticki IP i ADSL preko ISDN.
Da li neko moze da mi pomogne da podesim parametre?
Kada idem na klasicnu konfiguraciju iz SDM-a pri testu linije ne prolazi mi DNS server.
Zvao sam telekomov servis u vise navrata ali oni o ovome znaju koliko i ja, ako ne malo manje. Imam iskustva sa nekim drugim routerima i oni rade ali ne i Cisco.
Zato bih voleo ako neko ima strpljenja da mi objasni ceo proces konfiguracije nije bitno da li je preko SDM-a ili Command Prompta. |
[ optix @ 26.05.2008. 17:29 ] @
Koju verziju IOS-a imas (sh ver) ?
Jesi pogledao http://www.elitesecurity.org/p1654431 ?
To sto ne prolazi DNS server test nije previse bitno. Znaci da ruter nece imati podesen DNS server za (konzolne) dns upite koji se ostvaruju sa njega, klijentima iovako moras to rucno podesiti ili namestiti da se dodeljuje preko dhcp-a. Ili ubaci ih komandom
Code:
ip name-server x.x.x.x
ili mozes zahtevati da ti se automatski dodeli od provajdera pri dodeli adrese:
Code:
interface Dialer 1
ppp ipcp dns request
[Ovu poruku je menjao djricky dana 26.05.2008. u 23:13 GMT+1][ gaganed @ 26.05.2008. 20:39 ] @
Verzija IOS-a je 12.4, ako se ne varam, posto trenutno nisam pored routera.
U medjuvremenu probao sam sa drugim podesavanjima i sada vise nema problema sa DNS serverom, ali mi se javio drugi problem.
Kada pustim test ATM konekcije iz SDM-a router prijeavljuje gresku na "exit interface".
Da li mozda znas sta je upitanju?
A sto se tice teme u kojoj je opisana konfiguracija, jesam probao sa time i cini mi se da sam naisao na problem
kada sam dosao do enkapsulacije tu mi ruter prijavljuje da nisam uneo pravilan kod ili tako nesto.
Code:
encapsulation aal5snap
pppoe-client dial-pool-number 1
Nista ne kosta da probam opet, pa cu proveriti da li sam negde napravio gresku.
[ optix @ 26.05.2008. 22:15 ] @
Ok, ako je 12.4 onda se malkice razlikuje od konfiguracije u onom postu. Nema vpdn dela na pocetku.
Trebalo bi da ide ovako:
Code:
!
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
pvc 8/35
encapsulation aal5snap
pppoe-client dial-pool-number 1
!
!
interface Dialer0
ip address negotiated
ip mtu 1492
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
ppp authentication pap callin
ppp pap sent-username xxxxx@provajder password xxxxxx
#moras postaviti i default rutu ka dialer interfejsu
!
ip route 0.0.0.0 0.0.0.0 dialer0
#omoguciti NAT translacije, na ethernet interfejsu mora biti (ip nat inside) definisano
!
ip nat inside source list 1 interface Dialer0 overload
#u access listi 1 definises ko sme da korisit NAT (svi racunari iza ethernet interfejsa npr)
!
access-list 1 permit x.x.x.x z.z.z.z
Sto se tice SDM-a, moras mi reci, ako uopste kaze, koju tacno gresku prijavljuje. Exit interface je Dialer interface, eventualno ATM.
Konfigurisi ovo iz konzole, pa pokusaj da pingujes nesto na internetu. Ako prijavi neke greske prilikom konfigurisanja, zapisi na prenesi ovde.
[Ovu poruku je menjao optix dana 10.07.2010. u 21:41 GMT+1][ gaganed @ 26.05.2008. 22:19 ] @
OK havla ti na pomoci.
Probacu koliko ujutru pa javljam sta sam uradio.
[ gaganed @ 28.05.2008. 09:10 ] @
Opet nesto nece!
Mozda ja negde na drugom mestu pravim gresku.
Videcu da skinem moju konfiguraciju i zakacim je da vidis gde je problem
MOZE?
[ optix @ 28.05.2008. 09:37 ] @
Ajde. Uz nju dodaj i output-e komandi:
sh ip int br
sh pppoe session
sh dsl int atm0
[ gaganed @ 28.05.2008. 10:30 ] @
Evo kompletne konfiguracije i jos dadtne stvari koje si trazio.
Osim: sh ip int br. Javlja incomplete comand.
Code:
cisco#sh config
Using 2531 out of 131072 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname yourname
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
!
no aaa new-model
!
resource policy
!
ip subnet-zero
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool sdm-pool
import all
network 10.10.10.0 255.255.255.248
default-router 10.10.10.1
lease 0 2
!
!
no ip domain lookup
ip domain name yourdomain.com
!
!
crypto pki trustpoint TP-self-signed-3020559692
enrollment selfsigned
subject-name cn=IOS-Self-Signed-C
revocation-check none
rsakeypair TP-self-signed-3020559692
!
!
crypto pki certificate chain TP-self-signed-3020559692
certificate self-signed 01 nvram:IOS-Self-Sig#320E.cer
username cisco privilege 15 secret 5 $1$xJrF$1PY3qIYd1x0pZHg65bsrr/
!
!
!
!
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
dsl operating-mode auto
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 10.10.10.1 255.255.255.248
ip tcp adjust-mss 1452
!
ip classless
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
access-list 23 permit 10.10.10.0 0.0.0.7
no cdp run
!
control-plane
!
banner login ^C
-----------------------------------------------------------------------
Cisco Router and Security Device Manager (SDM) is installed on this device.
This feature requires the one-time use of the username "cisco"
with the password "cisco". The default username and password have a privilege le
vel of 15.
Please change these publicly known initial credentials using SDM or the IOS CLI.
Here are the Cisco IOS commands.
username <myuser> privilege 15 secret 0 <mypassword>
no username cisco
Replace <myuser> and <mypassword> with the username and password you want to use
.
For more information about SDM please follow the instructions in the QUICK START
GUIDE for your router or go to http://www.cisco.com/go/sdm
-----------------------------------------------------------------------
^C
!
line con 0
login local
no modem enable
line aux 0
line vty 0 4
access-class 23 in
privilege level 15
login local
transport input telnet ssh
!
scheduler max-task-time 5000
end
cisco#sh pppoe session
1 client session
Uniq ID PPPoE RemMAC Port VT VA State
SID LocMAC VA-st
N/A 3404 0030.8822.ef3e ATM0 Di0 N/A N/A
001e.4ac3.930f VC: 8/35
cisco#sh dsl int atm0
ATM0
Alcatel 20190 chipset information
ATU-R (DS) ATU-C (US)
Modem Status: Showtime (DMTDSL_SHOWTIME)
DSL Mode: ITU G.992.1 (G.DMT) Annex B
ITU STD NUM: 0x01 0x1
Vendor ID: 'STMI' 'BDCM'
Vendor Specific: 0x0000 0x6284
Vendor Country: 0x0F 0xB5
Capacity Used: 32% 21%
Noise Margin: 13.0 dB 27.0 dB
Output Power: 4.0 dBm -2.5 dBm
Attenuation: 36.0 dB 19.0 dB
Defect Status: None None
Last Fail Code: No
Watchdog Counter: 0xB5
control-plane
Watchdog Resets: 0gin ^C75/0/0 (size
Selftest Result: 0x00
---------
Subfunction: 0x00 (UR2)---------------------------
Interrupts: 7659 (0 spurious)
PHY Access Err: 0co
MT
Activations: 1o Router and Secur
LED Status: ON
LED On Time: 100 change these public
LED Off Time: 100entials using SDM or
Init FW: embedded total)
Operation FW: embedded
FW Version: 2.542
Here are th
Interleave Fast Interleave Fast
username <myuser> privilege 15 secret 0 <mypassword>
Speed (kbps): 0 1536 0 192
no username cisco
Cells: 0 202270 0 nd pa
LOM Monitoring : Disablede vty 0 4
ac
DMT Bits Per Bin
000: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0ilege level 15 0 giants, 0 thrott
010: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0login local
transport i
0A0: 4 0 4 0 0 4 4 0 0 3 4 4 4 0 0 0
0B0: 0 0 0 0 4 0 0 0 0 0 0 0 0 0 0 0
0C0: 0 0 4 4 0 0 0 0 0 0 4 0 0 0 0 0
0D0: 3 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0E0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0F0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
DSL: Training log buffer capability is not enabled
[ optix @ 28.05.2008. 11:01 ] @
Nisi prikazao running-config (radnu konfiguraciju), nego saved config (sacuvanu konfiguraciju). Kucaj sh run, umesto sh config 
Citat: gaganed: Osim: sh ip int br. Javlja incomplete comand.
Kucaj: show ip interface brief
[ gaganed @ 28.05.2008. 11:43 ] @
Pardon moja greska evi stize ruunin config i ostatk
Code:
Building configuration...
Current configuration : 4276 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname cisco
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
enable secret 5 $1$8unk$2uQlGYgvbwynoy5SOIv8W1
!
no aaa new-model
!
resource policy
!
ip subnet-zero
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool sdm-pool
import all
network 10.10.10.0 255.255.255.248
default-router 10.10.10.1
lease 0 2
!
!
no ip domain lookup
ip domain name yourdomain.com
!
!
crypto pki trustpoint TP-self-signed-3020559692
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3020559692
revocation-check none
rsakeypair TP-self-signed-3020559692
!
!
crypto pki certificate chain TP-self-signed-3020559692
certificate self-signed 01
3082024F 308201B8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33303230 35353936 3932301E 170D3038 30353233 31343339
33375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 30323035
35393639 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100B2CF EFB72DA4 699F3E9D D2884EC4 15554DA2 322E95B2 56552CEF 2819299D
2C2445A7 013870B7 8CE53EFE D91D79DE 46EDB5DB 16A3DA93 3E8CE0B3 F9151359
19663301 DF3EB6CE DF2CBF38 269FEDA8 3527AED0 18791148 AB66E086 72CC116E
AECB5042 00BE6C56 8689491D B9CB7E97 B56594AC FC54365D 20D24541 50EEF020
24E50203 010001A3 77307530 0F060355 1D130101 FF040530 030101FF 30220603
551D1104 1B301982 17796F75 726E616D 652E796F 7572646F 6D61696E 2E636F6D
301F0603 551D2304 18301680 14927A52 F19B8789 BF91C12C 7140EB8F 5028F82F
C8301D06 03551D0E 04160414 927A52F1 9B8789BF 91C12C71 40EB8F50 28F82FC8
300D0609 2A864886 F70D0101 04050003 8181005C A3EB46D0 01F7C8D0 F1AD8CC8
1229B1D5 183C3FBB 9BFC5FCD 417FB20D 3F049AC2 F718ACA1 5E52952E 439D9A26
6C974086 668BFA8E 4340EFED 715E3009 5978B83D AC9DA09F 94AD7555 338C7836
C8394141 A499E5F6 3751B3FB D9FBF2FB BC24F7AA A6D81D71 311396C7 28C96076
9EB7E1AA CF7D3108 20BA51D1 C4C7B22F E8987F
quit
username cisco876 privilege 15 secret 5 $1$R1Qp$l4x1WV7IkHz7dNA1mtZlu1
!
!
!
!
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
!
interface ATM0
no ip address
no atm ilmi-keepalive
pvc 8/35
pppoe-client dial-pool-number 1
!
dsl operating-mode auto
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 10.10.10.1 255.255.255.248
ip tcp adjust-mss 1452
!
interface Dialer0
ip address negotiated
ip mtu 1492
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
no cdp enable
ppp authentication pap calin
ppp pap sent-username [email protected] password 0 xxxxxxxx
!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 1 interface Dialer0 overload
!
access-list 1 permit 0.0.0.0 255.255.255.248
no cdp run
!
control-plane
!
banner login ^C
-----------------------------------------------------------------------
Cisco Router and Security Device Manager (SDM) is installed on this device.
This feature requires the one-time use of the username "cisco"
with the password "cisco". The default username and password have a privilege level of 15.
Please change these publicly known initial credentials using SDM or the IOS CLI.
Here are the Cisco IOS commands.
username <myuser> privilege 15 secret 0 <mypassword>
no username cisco
Replace <myuser> and <mypassword> with the username and password you want to use.
For more information about SDM please follow the instructions in the QUICK START
GUIDE for your router or go to http://www.cisco.com/go/sdm
-----------------------------------------------------------------------
^C
!
line con 0
login local
no modem enable
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet ssh
!
scheduler max-task-time 5000
end
I druga tri koja si trazio
Code:
cisco#sh ip interface briefisco#
090: 0 0 0 0 0
Interface IP-Address OK? Method Status Prot 0 0 0 0 0 0 0sh config
Using 2531
FastEthernet3 unassigned YES unset up down
BRI0 unassigned YES unset administratively down down
BRI0:1 unassigned YES unset administratively down down
BRI0:2 unassigned YES unset administratively down down
ATM0 unassigned YES manual up up
Vlan1 10.10.10.1 YES NVRAM up up
Dialer0 unassigned YES manual up up
NVI0 unassigned YES unset up up
Virtual-Access1 unassigned YES unset down down
cisco#sh pppoe session
1 client session
Uniq ID PPPoE RemMAC Port VT VA State
SID LocMAC VA-st
N/A 7511 0030.8822.ef1f ATM0 Di0 Vi1 N/A
001e.4ac3.930f VC: 8/35 DOWN
cisco#sh dsl int atm0n
ATM0iq I
Alcatel 20190 chipset informationCF EFB72DA4 699F3E9D D2884EC4 155
ATU-R (DS) ATU-C (US)
CRC Errors:
SID LocMAC
2C2445A7
Modem Status: Showtime (DMTDSL_SHOWTIME) 3E8CE0B3 F9151359
DSL Mode: ITU G.992.5 (ADSL2+) Annex B
19663301 DF3EB6CE DF2CBF38 269FEDA8 3527
ITU STD NUM: 0x03 0x2Result: 0x0
001e.4ac3.930f VC: 8/
Chip Vendor ID: 'STMI' 'BDCM'20D24541 50EEF0)0 0 0 0 0 0 0
ATM00
Alcatel 20190 ch
Modem Vers
Attenuation: 34.0 dB 19.0 dBD1 C4C7B22F E8987F 0
Capacity Used: 10%
Defect Status: None Noneret 5 $1$R1Qp$l4x1WV7IkHz7dNA1mtZlu1e Margin: 12.0
Last Fail Code: None 8.5 dBr Binut,
Watchdog Counter: 0x49!
interface BRI0 0 0
Watchdog Resets: 0dress5 dBm
Selftest Result: 0x00dBm 0 0 0 0 0 0 0
s
Subfunction: 0x00 (UR2)e ATM0
020:
Attenua
no ip
Interrupts: 15350 (0 spurious)keepalive
030: 2 2 2 3 3
pv
PHY Access Err: 0ppoe-client dial-p
Activations: 2
LED Status: ONperating-mode auto
LED On Time: 100
L
!t
interface Fast
LED Off Time: 100io
Watchdog
!o
inter
Init FW: embedded
Watchdog Rese
!:
interf
Operation FW: embeddedult: 0x00C B 0
!
interfa
FW Version: 2.5420x00 (UR2)
!
in
050: D C D D C C C C 0 C C 0 0 C C 0 on this device.
DMT Bits Pe
060: 0 C 2 C C 0 0 0 C 0 C C 0 C C C0 0 0 0 0 0 0 0 0
This feature requ
070: C B B 0 0 C B 0 B 0 0 0 0 0 0 0 "cisco"0 0 0 0 0 0 0
DSL: Trainin
080: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0th the password "cisco". The default
140: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
150: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
160: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
170: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
180: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
190: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
1A0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
1B0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
1C0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
1D0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
1E0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
1F0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
DSL: Training log buffer capability is not enabled
[Ovu poruku je menjao gaganed dana 28.05.2008. u 13:15 GMT+1]
[Ovu poruku je menjao gaganed dana 28.05.2008. u 13:26 GMT+1]
[Ovu poruku je menjao gaganed dana 28.05.2008. u 13:40 GMT+1]
[Ovu poruku je menjao gaganed dana 28.05.2008. u 14:09 GMT+1][/code][/code]
[Ovu poruku je menjao gaganed dana 29.05.2008. u 09:26 GMT+1]
[Ovu poruku je menjao gaganed dana 29.05.2008. u 09:27 GMT+1]
[Ovu poruku je menjao gaganed dana 29.05.2008. u 09:29 GMT+1][ optix @ 28.05.2008. 11:59 ] @
Ne bih da zvucim ko zakeralo, ali tekst u ovoj gore konfiguraciji je prilicno iskrzan, tako da se slabo sta razume
Mozes li da ispravis to formatiranje. U onoj prvoj gore je relativno ok.
Izmeni samo poruku iznad. I, takodje, izbaci username i sifru za adsl pristup!  [ gaganed @ 28.05.2008. 12:28 ] @
E sada treba da je sve OK.
I hvala za username i sifru. Ne bih ni video, odlepio sam od ovog routera!
[Ovu poruku je menjao gaganed dana 28.05.2008. u 13:41 GMT+1]
[Ovu poruku je menjao gaganed dana 28.05.2008. u 13:43 GMT+1]
[ gaganed @ 28.05.2008. 14:49 ] @
Nadam se da je sada upotrebljivo?
[ optix @ 29.05.2008. 03:07 ] @
Pa nije, nazalost, pogledaj i sam da li mozes nesto da razumes 
Nego, posto imas SDM, idi na View > Running config > otvorice ti prozor sa ispisanom konfiguracijom. Iskopiraj odatkle, pa zameni ponovo. [ gaganed @ 29.05.2008. 08:28 ] @
Evo kopirano iz SDM-a.
Nadam se da ce da bude dobro.
[ optix @ 29.05.2008. 17:37 ] @
E sad vec lici na konfiguraciju :)
Koja je btw ok, bar sto se tice dsl-a. Nije mi jedino jasna ova wildcard maska u acess-list 1, ali otom potom.
Ono sto ti sad pravi problem je sto je Vast DOWN (sh pppoe session) a treba da bude UP. Sto znaci da nesto sa uspostavljanjem PPPoE sesije ili PPP pregovaranjem nije ok.
Proveri za svaki slucaj da li se kod vas stvarno koristi vpi/vci 8/35 za isdn.
Dalje, prvo obrisi sve pppoe sesije clear pppoe all sacekaj malo pa ponovo pogledaj sta se desava kada kucas sh pppoe session. Ako je i dalje Vast - DOWN (a pojavljuju se neki brojevi za RemMAC i LocMAC koji nisu samo 0) moras da vidis sta pravi problem.
Iz konzole kucas prvo terminal monitor zatim debug vpdn pppoe-events. Iskopiraj mi log koji ti se bude pojavljivao na ekranu, pocece sa Sending PADI: vc=8/35
[Ovu poruku je menjao optix dana 29.05.2008. u 18:50 GMT+1]
[ gaganed @ 29.05.2008. 19:19 ] @
Koliko sutra cu da probam, pa se javljam i saljem zeljene parametre.
See ya!
[ gaganed @ 30.05.2008. 08:38 ] @
Evo sada Vast UP, kao sto mozes da vidis.
Code:
router#sh pppoe session
1 client session
Uniq ID PPPoE RemMAC Port VT VA State
SID LocMAC VA-st
N/A 15798 0030.8822.ef1f ATM0 Di0 Vi1 N/A
001e.4ac3.930f VC: 8/35 UP
Sto se tice toga da li je vpi/vci 8/35 ispravan. To bi trebalo da je 100% tacno jer sam zvao telekomov korisnicki servis bas iz tih razloga,
a i gledao sam konfiguraciju njihovog routera.
Citat:
Iz konzole kucas prvo terminal monitor zatim debug vpdn pppoe-events. Iskopiraj mi log koji ti se bude pojavljivao na ekranu, pocece sa Sending PADI: vc=8/35
Ne prihvata mi terminal ovu komandu, ili ja mozda negde gresim? [ gaganed @ 30.05.2008. 08:45 ] @
Sada kad sam otkucao sh interf dialer0.
Vidim da je Inter. addresa na Dialer0 staticka IP koju sam ja dobio od Telekoma!
[ optix @ 30.05.2008. 09:21 ] @
Znaci radi sad?
[ gaganed @ 30.05.2008. 09:37 ] @
Valjda.
Mozes samo da mi pomognes oko vlan interfejsa. Da nisam nesto pogresio izmedju veze routera i racunara?
Ali koliko vidim da je Dialer 0 nasao IP telekoma.
Code:
Dialer0 is up, line protocol is up (spoofing)
Hardware is Unknown
Internet address is 93.86.60.226/32
MTU 1500 bytes, BW 56 Kbit, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
...
[ gaganed @ 30.05.2008. 09:56 ] @
Ali nece na kompu.
Ajde kazi mi koji gateway da koristim za router?
[ optix @ 30.05.2008. 09:58 ] @
Dap, vidis se na net-u
Ispravi access listu 1 da bude:
Code:
access-list 1 permit 10.10.10.0 0.0.0.7
To odgovara mreznoj masci 255.255.255.248 koju vidim koristis za vlan.
Gateway na racunarima ce se sam podesiti posto si namestio dhcp server. [ gaganed @ 30.05.2008. 10:05 ] @
ali nece jos uvek.
Ajde da ja promenim vlan ip na 192.168.0... i mask 255.255.255.0
i access list permit 1 da stavim 192.168.0.0 ...
Moze?
[ gaganed @ 30.05.2008. 10:07 ] @
A sto se tice ADSL uspeo sam da pingujem nesto na netu!!!!!
TI SI GENIJE!!!
[ gaganed @ 30.05.2008. 10:18 ] @
Uspevam da pingujem medjusobno router i PC.
Sa routera uspebvam da pingujem web ali sa PC nikako.
Na PC mi je utomatsko dodeljivanje adrese i lepo je nasao router kao default gateway.
U cemu je problem?
I JOS JEDNOM TI SI GENIJE!!!
[ optix @ 30.05.2008. 10:25 ] @
Nije bitno koje ces adrese koristiti.
Nego, nema DNS server-a definisanih.
dodaj ovo u dhcp konfiguraciju:
Code:
!
ip dhcp pool sdm-pool
dns-server 212.200.13.13 195.178.32.2
!
Sada ce racunari imati podesen dns server. (resetuj konekciju na racunarima) Trebalo bi podesiti i na ruteru. Pogledaj moj prvi post na temi.
Eh,da! Na Vlan interfesju dodaj
Code:
!
interface Vlan1
ip nat inside
!
[ gaganed @ 30.05.2008. 10:44 ] @
Citat:
To sto ne prolazi DNS server test nije previse bitno. Znaci da ruter nece imati podesen DNS server za (konzolne) dns upite koji se ostvaruju sa njega, klijentima iovako moras to rucno podesiti ili namestiti da se dodeljuje preko dhcp-a. Ili ubaci ih komandom
Code:
ip name-server x.x.x.x
ili mozes zahtevati da ti se automatski dodeli od provajdera pri dodeli adrese:
Code:
interface Dialer 1
ppp ipcp dns request
Reci mi samo da li da upisem ip name-server pa adresu dns servera?
I ako sad promenim vlan adresu (192.168.0....) da li imam nestu u konfiguraciji da menjam i ako ima sta? [ optix @ 30.05.2008. 10:53 ] @
Da, znaci ide
ip name-server 212.200.13.13
ip name-server 195.178.32.2
To je za sam ruter. Za racunare, vec kako sam ti objasnio, preko dhcp-a.
Ako hoces da menjas adresiranje, onda moras da promenis, ip adresu i masku Vlan interfejsa, ip adrese i maske koje se dodeljuju klijentima preko dhcp-a, access-listu 1 kako bi pustala te racunare na net, red ip dhcp excluded-address 10.10.10.1 - adresa rezervisana za ruter, koja se nece dodeljivati putem dhcp-a. Ali kazem ti, nemas potrebe da menjas adresiranje, i ovo je ok. Mozda jedino da prosiris mreznu masku, posto sad imas jos 5 upotrebljivih adresa za racunare, ako njih ima vise, bice problema...
[ gaganed @ 30.05.2008. 10:59 ] @
Ali mreza mi vec radi na 192.168.0... sa maskom 255.255.255.0 i ima mnogo vise od 5 racunara.
A ja planiram da router ide u switcher pa...
Mislim da mi je najpametnije da promenim adersu vlan1.
Sta ti mislis?
[ optix @ 30.05.2008. 11:11 ] @
Sasvim je svejedno koje ce se adrese koritisi, bino je samo da su sve unutar podesene mrezne maske.
Ako hoces da zadrzis te 192... onda izmeni podesavanja na ruteru. Ako su vec staticki podeljene, onda ti i ne treba dhcp, mada to isto mozes podesiti i putem dhcp-a.
Ako nije bitno da ostanu te 192... onda samo izmeni podesavanja na ruteru koja se ticu mreznih maski, dakle svuda gde je bilo 255.255.255.248 ici ce 255.255.255.0, a za access listu umesto 0.0.0.7 ici ce 0.0.0.255 Sve je validno, dok je ispravno podeseno ;)
Ne zaboravi da dodas onu liniju ip nat inside u Vlan-u.
[ gaganed @ 30.05.2008. 11:26 ] @
ok ja cu da probam da prebacim na 192...
A ti budi tu ako mi zatrebas. :-D
Ako budem menjao na 192... maska mi je svuda 255.255.255.0 tako?
I reci mi u tom slucaju u access listi sta treba da upisem?
[ optix @ 30.05.2008. 11:29 ] @
Da.
access-list 1 permit 192.168.0.0 0.0.0.255
[ gaganed @ 30.05.2008. 11:30 ] @
Ok krecem da radim
[ gaganed @ 30.05.2008. 11:54 ] @
Moze samo jos mala pomoc oko DHCP-a.
Stari DHCP pool network je 10.10.10.0 mask 255.255.255.248
da li da stavim 192.168.0.0 255.255.255.0
i u dhcp pool-u
Starting IP: 10.10.10.2
Ending IP: 10.10.10.6
Sta da stavim umesto ove dve adrese???
Deafult router je bio 10.10.10.1 ja sam novu stavio 192.168.0.1
Sve ovo hocu da promenim iz SDM-a.
Da li ce da radi?
[ optix @ 30.05.2008. 12:01 ] @
Citat: gaganed: Moze samo jos mala pomoc oko DHCP-a.
Stari DHCP pool network je 10.10.10.0 mask 255.255.255.248
da li da stavim 192.168.0.0 255.255.255.0
Da. Vidi samo da SDM obrise taj prethodni pool.
Citat:
i u dhcp pool-u
Starting IP: 10.10.10.2
Ending IP: 10.10.10.6
Sta da stavim umesto ove dve adrese???
Nista, to je valjda samo informacija, promenice se samo kad promenis pool.
Citat:
Sve ovo hocu da promenim iz SDM-a.
Da li ce da radi?
Resetovace ti konekciju, jer si izmenio adresu rutera.
Imas jos pola sata da to namestis, ja posle toga palim na treninge [ gaganed @ 30.05.2008. 12:13 ] @
Sljaka!!!
Ej covece hvala ti puno!!!
Tvoj sam duznik! Stvarno ne znam kako da ti se oduzim!
[ optix @ 30.05.2008. 12:27 ] @
:) kul
pozdrav
[ djricky @ 30.05.2008. 17:05 ] @
kako cete vas dvojica da se raskusurate to je vasa stvar...
a ovo ode u TOP temu... [ majolika08 @ 05.06.2008. 11:30 ] @
Skoro nisam videla lepse odradjen posao. Obojica ste bili sjajni ! :-)
Pozdrav
[ gaganed @ 05.06.2008. 11:50 ] @
Hvala!
[ Strength @ 08.07.2010. 02:21 ] @
Pozdrav svima
Imam problem da uspostavim ADSL konekciju na cisco SOHO97
Probao sam uneti konfiguracije sa www.cisco.com za PPPoE Client with a Dynamic IP Address ali bez uspeha. Koristim telekom ADSL.
Da li neko ima iskustva sa ovim ruterom pa da mi pomogne oko problema?
Hvala [ Strength @ 09.07.2010. 23:58 ] @
Pozdrav svima
U pitanju je cisco SOHO97 router (software 12.4) ne uspevam nikako da se konektujem na internet. Probao sam mnoge konfiguracije ali bez uspeha. Posto je vec bilo slicnih tema postavicu podatke pa ako neko ustanovi gresku neka pomogne.
Router#sh running
Building configuration...
Current configuration : 1861 bytes
!
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime year
service timestamps log datetime msec localtime year
service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
memory-size iomem 5
!
no aaa new-model
!
resource policy
!
vpdn enable
!
!
!
ip cef
!
!
!
!
!
!
!
!
interface Ethernet0
description To Layer-2 Switch
ip address 10.10.10.1 255.255.255.240
ip nat inside
no cdp enable
hold-queue 32 in
hold-queue 100 out
!
interface ATM0
description ADSL To SBC
no ip address
ip route-cache flow
no atm ilmi-keepalive
dsl operating-mode auto
hold-queue 224 in
!
interface ATM0.35 point-to-point
description SBC VPI/VCI = 8/35
no snmp trap link-status
pvc 8/35
pppoe-client dial-pool-number 1
!
!
interface Dialer1
description To SBC
ip address negotiated
no ip redirects
no ip proxy-arp
ip mtu 1492
ip nat outside
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
dialer-group 2
no cdp enable
ppp authentication chap pap callin
ppp chap hostname <USERNAME>
ppp chap password 7 03241825094F314D5D1A0E0A05164848
ppp pap sent-username <USERNAME> password 7 1437512503443A
2A373B243A30174353
ppp ipcp dns request accept
ppp ipcp route default
ppp ipcp address accept
!
interface Dialer0
no ip address
no cdp enable
!
ip route 0.0.0.0 0.0.0.0 Dialer0
ip http server
no ip http secure-server
!
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source list 10 interface Dialer1 overload
!
access-list 1 permit 10.10.10.0 0.0.0.255
access-list 10 permit 10.0.0.0 0.255.255.255
dialer-list 2 protocol ip permit
no cdp run
!
control-plane
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
access-class 10 in
login
!
scheduler max-task-time 5000
end
Router#sh ip int br
Interface IP-Address OK? Method Status Prot
ocol
Ethernet0 10.10.10.1 YES NVRAM up up
ATM0 unassigned YES NVRAM up up
ATM0.35 unassigned YES unset up up
NVI0 unassigned NO unset up up
Dialer1 unassigned YES NVRAM up up
Dialer0 unassigned YES unset up up
Router#sh pppoe session
1 client session
Uniq ID PPPoE RemMAC Port VT VA State
SID LocMAC VA-st
N/A 0 0000.0000.0000 ATM0.35 Di1 N/A PADISNT
0000.0000.0000 VC: 8/35
Router#sh dsl int atm0
ATU-R (DS) ATU-C (US)
Modem Status: Showtime (DMTDSL_SHOWTIME)
DSL Mode: ITU G.992.1 (G.DMT)
ITU STD NUM: 0x01 0x01
Vendor ID: 'ALCB' 'GSPN'
Vendor Specific: 0x0000 0x0008
Vendor Country: 0x00 0xFF
Capacity Used: 42% 40%
Noise Margin: 30.0 dB 25.0 dB
Output Power: 8.0 dBm 10.0 dBm
Attenuation: 5.0 dB 1.0 dB
Defect Status: None None
Last Fail Code: None
Selftest Result: 0x00
Subfunction: 0x15
Interrupts: 647 (1 spurious)
Activations: 1
Init FW: embedded
Operartion FW: embedded
SW Version: 3.9.220
FW Version: 0x1A04
Interleave Fast Interleave Fast
Speed (kbps): 0 4096 0 256
Reed-Solomon EC: 0 0 0 0
CRC Errors: 0 0 0 1
Header Errors: 0 0 0 0
Bit Errors: 0 0
BER Valid sec: 0 0
BER Invalid sec: 0 0
LOM Monitoring : Disabled
DMT Bits Per Bin
00: 0 0 0 0 0 0 0 0 2 2 4 4 5 5 6 5
10: 5 5 5 5 5 5 4 4 3 3 3 3 2 2 0 0
20: 0 0 0 0 0 0 0 0 0 0 0 2 2 2 2 2
30: 3 4 4 4 4 4 4 5 5 5 5 5 5 5 5 5
40: 0 5 5 6 6 6 6 6 6 6 6 6 6 6 6 6
50: 6 6 6 6 6 7 7 7 7 7 7 7 7 7 7 2
60: 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7
70: 7 7 7 7 7 7 7 7 7 7 7 7 6 4 6 6
80: 7 6 7 7 7 6 7 7 7 7 7 6 6 6 6 7
90: 7 6 6 6 7 7 6 6 6 5 6 6 6 6 6 6
A0: 6 6 6 6 6 4 5 6 6 6 6 6 7 7 6 6
B0: 6 6 6 5 6 6 6 6 6 6 6 6 6 6 6 6
C0: 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6
D0: 6 6 6 5 5 5 5 5 5 5 5 5 5 5 5 5
E0: 5 4 4 4 4 4 4 4 4 4 4 4 4 3 3 3
F0: 3 3 2 2 2 0 0 0 0 0 0 0 0 0 0 0
Training log buffer capability is not enabled yet.
Hvala
[ optix @ 10.07.2010. 10:43 ] @
Iz Dialer1 izbaci 'dialer-group 2', to je povezano sa globalnom komandom 'dialer-list 2 protocol ip permit' koja ti takodje nije potrebna. Telekom ne koristi chap, pa ti taj deo u ppp generalno nije potreban, mada ne smeta. 'ip tcp adjust-mss 1452' moras definisati na Ethernet interfejsu.
Default ruta ti gadja Dialer0 interfejs, ispravi to na Dialer1.
Kad zavrisis lupi jedan 'clear pppoe all', ili eventualno cak resetuj ruter (write mem, pre toga) nekad im bas treba vremena da uspostave pppoe sesiju... Vidi onda da li dobijas adresu na Dialer1 interfejsu i sta kaze za 'sh pppoe session'.
[ Strength @ 10.07.2010. 17:21 ] @
Mozda ima jos gresaka u kodu:
Code:configure terminal
!
vpdn enable
!
!
interface Ethernet0
description To Layer-2 Switch
ip address 10.10.10.1 255.255.255.240
ip tcp adjust-mss 1452
ip nat inside
no cdp enable
hold-queue 32 in
hold-queue 100 out
no shut
exit
!
interface ATM0
description ADSL To SBC
no ip address
ip route-cache flow
no atm ilmi-keepalive
dsl operating-mode auto
hold-queue 224 in
no shut
exit
!
interface ATM0.35 point-to-point
description SBC VPI/VCI = 8/35
no snmp trap link-status
pvc 8/35
pppoe-client dial-pool-number 1
exit
exit
!
!
interface Dialer0
description To SBC
ip address negotiated
no ip redirects
no ip proxy-arp
ip mtu 1492
ip nat outside
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
no cdp enable
ppp authentication pap callin
ppp pap sent-username < [email protected]> password <password>
ppp ipcp dns request accept
ppp ipcp route default
ppp ipcp address accept
exit
!
ip nat inside source list 10 interface Dialer0 overload
!
access-list 10 permit 10.0.0.0 0.255.255.255
!
ip route 0.0.0.0 0.0.0.0 dialer0
!
end
Evo sta kaze sh int:
Citat: Router#sh int
Ethernet0 is up, line protocol is up
Hardware is PQUICC Ethernet, address is 0011.bb64.224d (bia 0011.bb64.224d)
Description: To Layer-2 Switch
Internet address is 10.10.10.1/28
MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 10Mb/s
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:01, output 00:00:03, output hang never
Last clearing of "show interface" counters never
Input queue: 0/32/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/100 (size/max)
5 minute input rate 2000 bits/sec, 3 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
99 packets input, 6128 bytes, 0 no buffer
Received 5 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 input packets with dribble condition detected
45 packets output, 7722 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
ATM0 is up, line protocol is up
Hardware is PQUICC_SAR (with Alcatel ADSL Module)
Description: ADSL To SBC
MTU 1500 bytes, sub MTU 1500, BW 256 Kbit, DLY 80 usec,
reliability 19/255, txload 1/255, rxload 1/255
Encapsulation ATM, loopback not set
Encapsulation(s): AAL5 AAL2, PVC mode
10 maximum active VCs, 1024 VCs per VP, 1 current VCCs
VC Auto Creation Disabled.
VC idle disconnect time: 300 seconds
Last input never, output 00:00:27, output hang never
Last clearing of "show interface" counters never
Input queue: 0/224/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: Per VC Queueing
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
8 packets input, 3540 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
4 packets output, 280 bytes, 0 underruns
0 output errors, 0 collisions, 3 interface resets
0 output buffer failures, 0 output buffers swapped out
ATM0.35 is up, line protocol is up
Hardware is PQUICC_SAR (with Alcatel ADSL Module)
Description: SBC VPI/VCI = 8/35
MTU 1500 bytes, BW 800 Kbit, DLY 80 usec,
reliability 19/255, txload 1/255, rxload 1/255
Encapsulation ATM
8 packets input, 3508 bytes
4 packets output, 280 bytes
0 OAM cells input, 0 OAM cells output
AAL5 CRC errors : 0
AAL5 Oversized SDUs : 0
0 packets input, 0 bytes
0 packets output, 0 bytes
Last clearing of "show interface" counters never
NVI0 is up, line protocol is up
Hardware is NVI
Interface is unnumbered. Using address of NVI0 (0.0.0.0)
MTU 1514 bytes, BW 10000000 Kbit, DLY 0 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation UNKNOWN, loopback not set
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 packets output, 0 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 output buffer failures, 0 output buffers swapped out
Dialer0 is up (spoofing), line protocol is up (spoofing)
Hardware is Unknown - ovo mi ne izgleda dobro
Description: To SBC
Internet address will be negotiated using IPCP
MTU 1500 bytes, BW 56 Kbit, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation PPP, loopback not set
Keepalive set (10 sec)
DTR is pulsed for 1 seconds on reset
Last input never, output never, output hang never
Last clearing of "show interface" counters 00:03:17
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: weighted fair
Output queue: 0/1000/64/0 (size/max total/threshold/drops)
Conversations 0/0/16 (active/max active/max total)
Reserved Conversations 0/0 (allocated/max allocated)
Available Bandwidth 42 kilobits/sec
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes
0 packets output, 0 bytes Citat: 1 client session
Uniq ID PPPoE RemMAC Port VT VA State
SID LocMAC VA-st
N/A 0 0000.0000.0000 ATM0.35 Di0 N/A PADISNT
0000.0000.0000 VC: 8/35
Pokazuje isto.
[ optix @ 10.07.2010. 19:56 ] @
Crveni deo koji si naznacio je ok, to nije problem.
Prolazi li ovo?
Code:
ping atm int atm0 8 35 end
ili
ping atm int atm0.35 8 35 end [ Strength @ 10.07.2010. 20:19 ] @
Citat: Router#ping atm int atm0 8 35 end
Type escape sequence to abort.
Sending 5, 53-byte end-to-end OAM echoes, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Router#ping atm int atm0.35 8 35 end
Type escape sequence to abort.
Sending 5, 53-byte end-to-end OAM echoes, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Nece da moze nadam se da ce pomoci [ optix @ 10.07.2010. 20:33 ] @
Code:
!
interface ATM0.35 point-to-point
pvc 8/35
encapsulation aal5snap
pppoe-client dial-pool-number 1
!
Promace mi encapsulation aal5snap deo... to dodaj. Onda bi ovaj gore ping morao da proradi. Ako uspe, udri i jedan shut/no shut na Dialer interfejsu, pa vidi dobija li adresu (sacekaj neko vreme).
[ Strength @ 10.07.2010. 21:29 ] @
Sve po starom ping ne prolazi, adrese nema
Ne znam zasto imam osecaj da programiram pokvaren router? [ optix @ 10.07.2010. 21:51 ] @
Taj se baš kočoperi...
Ništa, probaj još jedanput, napravi konfiguraciju kao ova dole, izbaci ATM0.35 int. Ovo je osnova sa kojom bi morao da radi (ako je sve ispravno). Obzirom da se čip sinhronizovao sa DSLAM-om, deluje kao da jeste.
Code:
!
interface ATM0
no ip address
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5snap
pppoe-client dial-pool-number 1
!
!
interface Dialer0
mtu 1492
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
no cdp enable
ppp authentication pap callin
ppp pap sent-username xxx password xxx
!
P.S. Siguran si da je 12.4.x IOS (sh ver) ? [ Strength @ 10.07.2010. 22:53 ] @
verzija je 12.4(7) ali sam je skino sa nekog ruskog sajta mozda je tu problem. Da li je moguce da telekom nekako ne da pristup ostalim ruterima osim ovih njihovih?
Nece ni ovo da radi sto si predlozio.
Sutra probavam sa drugim IOS-om pa cemo da vidimo. A lepo sam pitao tog sto mi je prodao da li je sve ispravno, kaze 100% delovao je ubedljivo 
[Ovu poruku je menjao optix dana 11.07.2010. u 00:29 GMT+1][ optix @ 10.07.2010. 23:29 ] @
Citat: Da li je moguce da telekom nekako ne da pristup ostalim ruterima osim ovih njihovih?
Ne. (sve dok su cipovi kompatibilni...) Cisco sasvim sigurno radi, kucam preko jednog...
Moguce je da IOS pravi problem, probaj svakako sa drugim (onaj koji je dosao sa ruterom?). [ Strength @ 11.07.2010. 11:14 ] @
kad sam ga dobio imao je neki 12.2 ne bih bas taj da vracam probacu sad sa 12.4(5).
Prilikom prebacivanja preko xmoderm-a javio je Total retries: 24 ali je prebacio sve.
optix da li bi mogao da dodas jos tih par redova u gore navedeni CODE pa da bude kompletna konfiguracija za ADSL.
[Ovu poruku je menjao Strength dana 11.07.2010. u 13:17 GMT+1]
[ optix @ 11.07.2010. 12:47 ] @
Kojih par redova ?
Ovo gore je sve sto ti treba da se ostvari pppoe sesija (na 12.4 ios-u). [ Strength @ 11.07.2010. 14:24 ] @
Mislio sam na Ethernt i ako treba jos nesto da bi to sve radilo.
Stavio sam novi IOS i kada sam uneo ovaj kod sto si napisao poceo je nesto da radi:
Dodao sam jos int atm0 no shut i onda se pojavilo sledece:
Citat: %LINK-3-UPDOWN: Interface ATM0, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0, changed state to up
%DIALER-6-BIND: Interface Vi1 bound to profile Di0
%LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up
ali odmah zatim
Citat: %DIALER-6-UNBIND: Interface Vi1 unbound from profile Di0
%LINK-3-UPDOWN: Interface Virtual-Access1, changed state to down
i svakih 5sec: changed state to up - changed state to down - changed state to up................
Citat: Router#sh pppoe session
1 client session
Uniq ID PPPoE RemMAC Port VT VA State
SID LocMAC VA-st
N/A 10024 0030.8810.2650 ATM0 Di0 Vi1 N/A
0011.bb64.224d VC: 8/35 DOWN
Dakle radi sad samo stalno puca veza, inace nije hteo da prihvati komandu ip virtual-reassembly[ optix @ 12.07.2010. 21:33 ] @
Ethernet ti je ok, podesio si IP (doduse sa cudnom maskom, ne znam zasto bas .240), nat, mss... funkcionisace ispravno, sve dalje zavisi od toga sta zelis da konfigurises.
Ja bih na tvom mestu stavio neki stariji IOS, npr. 12.3.nesto, ili cak taj 12.2 koji je dosao sa ruterom (u tom slucaju se menja konfig malo, ali imas primer i za to, pretrazi ostale teme gde sam odgovarao, imas link ovde na pocetku) cisto da se uverim da je ruter ispravan sa nekim pouzdanijim IOS-om. Ovako ne znas da li je bug do IOS-a, los firmware za dsl cip, ili neispravan ruter. Konfiguracija je sigurno ok... skoro pa identicnu (glavne stvari su iste) ja trenutno vozim na 1801 a pre toga i na 857 i 827.
[ Strength @ 14.07.2010. 08:43 ] @
Evo probao sam na 12.2 i na 12.3 i to na nekoliko verzija i opet isto:
*Mar 1 00:03:56.635: %LINK-3-UPDOWN: Interface ATM0, changed state to up
*Mar 1 00:03:57.635: %LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0, chan
ged state to up
*Mar 1 00:03:57.947: %DIALER-6-BIND: Interface Vi1 bound to profile Di1
*Mar 1 00:03:57.975: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state t
o up
*Mar 1 00:04:00.431: %DIALER-6-UNBIND: Interface Vi1 unbound from profile Di1
*Mar 1 00:04:00.435: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state t
o down
*Mar 1 00:04:23.591: %DIALER-6-BIND: Interface Vi1 bound to profile Di1
*Mar 1 00:04:23.595: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state t
o up
*Mar 1 00:04:26.063: %DIALER-6-UNBIND: Interface Vi1 unbound from profile Di1
*Mar 1 00:04:26.067: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state t
o down
PPPoE Session Information
UID SID RemMAC OIntf Intf Session
LocMAC VASt state
0 95 0030.8810.266c ATM0 Vi1 N/A
0011.bb64.224d VP/VC: 8/35 DOWN
Nesto jos treba da se podesi ili mozda ne stavljam dobar username i sifru ???
[ optix @ 14.07.2010. 21:02 ] @
Moguce, to bi se onda videlo ovde:
Code:
router# debug ppp authentication
router# terminal monitor (ako se kacis preko telnet-a, a ne konzolnog kabla)
Posalji output..
gasis sa
Code:
router# undebug all
router# terminal no monitor
[Ovu poruku je menjao optix dana 14.07.2010. u 22:23 GMT+1][ Strength @ 14.07.2010. 21:40 ] @
Evo sta kaze:
Citat: *Mar 1 00:13:09.899: %DIALER-6-BIND: Interface Vi1 bound to profile Di1
*Mar 1 00:13:09.899: Vi1 PPP: Using dialer call direction
*Mar 1 00:13:09.899: Vi1 PPP: Treating connection as a callout
*Mar 1 00:13:09.903: Vi1 PPP: Authorization NOT required
*Mar 1 00:13:09.903: Vi1 PPP: No remote authentication for call-out
*Mar 1 00:13:09.903: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state t
o up
*Mar 1 00:13:09.935: Vi1 PAP: Using hostname from interface PAP
*Mar 1 00:13:09.935: Vi1 PAP: Using password from interface PAP
*Mar 1 00:13:09.935: Vi1 PAP: O AUTH-REQ id 1 len 52 from " [email protected]
.telekom.yu"
*Mar 1 00:13:10.295: Vi1 PAP: I AUTH-NAK id 1 len 18 msg is "Access Denied"
*Mar 1 00:13:12.307: %DIALER-6-UNBIND: Interface Vi1 unbound from profile Di1
*Mar 1 00:13:12.311: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state t
o down
Trenutno je 12.2 IOS i ubacio sam config sa http://www.elitesecurity.org/p1654431, vpdn enable nece da prihvati ni ovaj a ni 12.3. [ optix @ 14.07.2010. 22:01 ] @
Yep, masis lozinku.
Kucaj ppp pap sent-username [email protected] password 0 sifra
0 - znaci da ce uslediti lozinka u plaintext formatu (nesifrovana)...
[ Strength @ 14.07.2010. 22:14 ] @
Ne da se jos :(
Citat: *Mar 1 00:53:23.139: %LINK-3-UPDOWN: Interface ATM0, changed state to up
*Mar 1 00:53:24.139: %LINEPROTO-5-UPDOWN: Line protocol on Interface ATM0, chan
ged state to up
*Mar 1 00:53:25.211: %DIALER-6-BIND: Interface Vi1 bound to profile Di1
*Mar 1 00:53:25.211: Vi1 PPP: Using dialer call direction
*Mar 1 00:53:25.215: Vi1 PPP: Treating connection as a callout
*Mar 1 00:53:25.215: Vi1 PPP: Authorization NOT required
*Mar 1 00:53:25.215: Vi1 PPP: No remote authentication for call-out
*Mar 1 00:53:25.215: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state t
o up
*Mar 1 00:53:25.319: Vi1 PAP: Using hostname from interface PAP
*Mar 1 00:53:25.319: Vi1 PAP: Using password from interface PAP
*Mar 1 00:53:25.319: Vi1 PAP: O AUTH-REQ id 1 len 53 from " [email protected]
.telekom.yu"
*Mar 1 00:53:25.575: Vi1 PAP: I AUTH-NAK id 1 len 18 msg is "Access Denied"
*Mar 1 00:53:27.571: %DIALER-6-UNBIND: Interface Vi1 unbound from profile Di1
*Mar 1 00:53:27.575: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state t
o down
Probao sam i sa razmakom od 0 i bez razmaka. Proverio sifru. Nesto opet ne valja. [ optix @ 14.07.2010. 22:20 ] @
Sa razmakom ide, znaci ppp pap sent-username [email protected] password 0 dsadsa
Pazi, ta greska definitivno znaci da je sifra losa. Sad ako mi kazes da se kacis sa drugim ruterom i da sve radi...  [ Strength @ 14.07.2010. 22:34 ] @
Ali ni jedno slovo da se promeni, ako nemas ideje probacu sutra sa novijim IOS-om ko zna mozda proradi. Na telekomovom JET SPEEDU se konektuje odmah :(
[ optix @ 14.07.2010. 22:42 ] @
Jesi apsolutno siguran da kucas pravu sifru? Mislim da sve imaju 7 karaktera i da obicno pocinju sa nekim brojem...
[ Strength @ 14.07.2010. 22:52 ] @
Ova moja ima 15 slova cak sam probao da je unesem rucno ponovo i radi!
desnim na polje sa zvezdicama pa Inspect element i onda pogledam sta pise u value="sifra"
????
[ optix @ 14.07.2010. 23:08 ] @
Ajd probaj sa CHAP-om... sad vidim da moj BRAS prihvata i chap... novi momenti u telekom-u... :)
Code:
Dialer0
ppp authentication chap callin
ppp chap hostname username
ppp chap password 0 lozinka
obrisi ppp pap liniju pre toga..
[ Strength @ 14.07.2010. 23:52 ] @
sad sam stavio 12.4(6) IOS
Citat: *Mar 1 10:21:40.923: %DIALER-6-BIND: Interface Vi1 bound to profile Di0
*Mar 1 10:21:40.927: Vi1 PPP: Using dialer call direction
*Mar 1 10:21:40.927: Vi1 PPP: Treating connection as a callout
*Mar 1 10:21:40.927: Vi1 PPP: Session handle[A0000004] Session id[0]
*Mar 1 10:21:40.927: Vi1 PPP: Authorization required
*Mar 1 10:21:40.927: Vi1 PPP: No remote authentication for call-out
*Mar 1 10:21:40.959: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state t
o up
*Mar 1 10:21:41.195: Vi1 PPP: No authorization without authentication
*Mar 1 10:21:41.207: Vi1 CHAP: I CHALLENGE id 1 len 28 from "bras_ns"
*Mar 1 10:21:41.215: Vi1 CHAP: Using hostname from interface CHAP
*Mar 1 10:21:41.215: Vi1 CHAP: Using password from interface CHAP
*Mar 1 10:21:41.215: Vi1 CHAP: O RESPONSE id 1 len 52 from " [email protected]
p.telekom.yu"
*Mar 1 10:21:41.531: Vi1 CHAP: I FAILURE id 1 len 17 msg is "Access Denied"
*Mar 1 10:21:43.527: %DIALER-6-UNBIND: Interface Vi1 unbound from profile Di0
*Mar 1 10:21:43.531: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state t
o down [ Strength @ 27.07.2010. 05:04 ] @
Stigli su mi parametri iz Telekoma i sad sve radi kako treba. Jedini je problem DNS, dakle ruter dobije dns adrese od telekoma ali nece da ih pusti na svoju adresu znaci kada ukucam adresu rutera kao dns servera nece da radi. Kako se to moze podesiti.
[ djricky @ 27.07.2010. 08:42 ] @
zasto bi koristio ruter kao DNS?
podesi DHCP server da ti daje direktno telekomove DNS-ove...
[ optix @ 27.07.2010. 09:15 ] @
Ovo sto kaze ricky, tako je generalno bolje.
Mada.. ako ti IOS podrzava, mozes to omoguciti ili sa 'ip dns server' ili sa 'ip dns spoofing x.x.x.x'. Ova druga komanda samo redirektuje zahteve (proxy) ka dns serveru koji podesis. U principu, te dve komande se svode na isto.
[ Strength @ 27.07.2010. 10:23 ] @
'ip dns server' je ono sto sam trazio, hvala puno optix na dosadasnjoj pomoci. Pozzz
[ dwa @ 22.05.2011. 19:06 ] @
encapsulation aal5snap - nema veze na koji provajder sam ?
pvc - ovo zavisi od provajdera tako VPI/VCI ?
[ optix @ 22.05.2011. 19:56 ] @
Enkapsulacija ti je najverovatnije aal5snap.
Za vpi/vci proveri sa provajderom, ne mora da se razlikuje od provajdera do provajdera (ako dele DSLAM), ali i moze.
[ zeenmc @ 07.07.2012. 20:17 ] @
Pozdrav, spomenuo sam na nekoj temi u vezi adsl, imam cisco ruter 1841, sa 12.4 IOS-om, posedujem WIC-ADSL, prvo me zanima koja je razlika izmedju WIC-ADSL i HWIC-ADSL2, nisam siguran ali kapiram da je fora u vezi standarda tj brzina koje kartice podrzavaju, WIC brzine do 8.2mbps, a HWIC do 25mbps, razlog sto pitam, jer sam ovih dana pazario preko ebay HWIC za 60ak evra, a neke karticee istog imena na ebay kostaju i po 400evra (naravno HWIC je koriscen)
Hocu da podesim svoj ruter da se kaci na telekomov adsl ,imam password, username i VPI/VPC, generalno, zanima me samo podesavanje, kad uzmes cist ruter bez config-a i podesavanje do uspostave veze s DSLAM-om, i napokon izlaz ka netu :)
Da li je prilaz svakom provajderu generalno isti, ima sustinskih razlika ?
Kada se podesava NAT, da li se ip nat outside, upisuje u dialer1, ili u ATM0/1/0 interface
Da li se uspostavljanje konekcije sa DSLAM-om, vrsi sa #int ATM0/1/0 no shut down, ili #int dialer 1 no shut down ?
Naravno cilj mi je podesavanje iz konsole, posto GUI prezirem :)
[ milosbeo @ 07.07.2012. 20:31 ] @
Citat: zeenmc:
Da li je prilaz svakom provajderu generalno isti, ima sustinskih razlika ?
Kada se podesava NAT, da li se ip nat outside, upisuje u dialer1, ili u ATM0/1/0 interface
Da li se uspostavljanje konekcije sa DSLAM-om, vrsi sa #int ATM0/1/0 no shut down, ili #int dialer 1 no shut down ?
Naravno cilj mi je podesavanje iz konsole, posto GUI prezirem :)
Ako si u mogućnosti obavezno ADSL2+ WIC, ako nije adsl2+ sve veće od 4Mbit moze da ti stvara probleme.
Za nat ide dialer, a za povezivanje na DSLAM, koristiš ATM interfejs. Ako hoces mogu sutra ovde da postavim konfiguraciju od nule :) [ zeenmc @ 07.07.2012. 20:39 ] @
Sad cu postaviti link aukcije kartice koju sam ja pazario, ono sto sam nasao na cisco sajtu, da je ta kartica adsl2 standard, nisam siguran, generalno zavrsice mi posao sta god da uzmem, samo bi me zezalo za sadasnji WIC, sto bih uzeo i IPTV, a inace bih pojurio staticku IP, te bi to bila neka mizerna brzina, taman da se uklopi u 8mbps :P
@Milenbeo, hvala na ponudi, znacilo bi mi ako bih za neke tebi bitne delove config fajla napisao u produzetku zasta sluzi navedeno podesavanje, inace, ja sam na Cisco akademiji, i generalno se snalazim sa osnovama, na predavanjima smo tek sam izasli izvan LAN-a, ali smo samo dotakli FrameRelay, PPP, PAP, CHAP, HDLC, nista u vezi ADSL :(
Sta mislite da li je ovo kartica ADSL2, ili je i ova pod starim standardom ?
HWIC ADSL[ zeenmc @ 12.11.2012. 14:55 ] @
Evo opet mene, instalirao sam CCP na svoj 1841 ruter, i preko GUI sam probao da namestim ADSL, ali bez uspeha, mislim da je problem u vezi izbora enkapsulacije i deo u vezi chap i pap autentifikacije, koristim telekomov adsl, dobio sam username i pass od telekoma
[ optix @ 12.11.2012. 20:52 ] @
Dobro, i? Jel nas samo obavestavas, ili ocekujes i da ti pomognemo? :)
[ milosbeo @ 12.11.2012. 21:21 ] @
Retoricko pitanje ili ?
Koristi se pap.
Evo imas ovde neke detalje:
http://www.umrezen.in.rs/netwo...rutera-za-telekom-srbija-adsl/[ optix @ 12.11.2012. 21:39 ] @
Radi i chap (barem sa telekom-om).
A i ovde ima toliko ostavljenih primera... treba samo uporediti...
[Ovu poruku je menjao optix dana 12.11.2012. u 22:53 GMT+1]
[ zeenmc @ 14.11.2012. 05:53 ] @
ATM0/1/0 uredjaj je down, podesavanje kao iz upustva sam vec probao doduse iz CCP, ali nisam uspeo, sta bi mogao biti problem ATM-u te nece da se aktivira ?
[ optix @ 14.11.2012. 23:57 ] @
Loš (crknut) port, crknut slot na ruteru, loša linija (signali ispod margine), loša enkapsulacija...
[ zeenmc @ 16.11.2012. 22:13 ] @
Uh, znaci wic sam stavljao i u 2611 i 1841, uglavnom uspem ja njega da nateram da ostane up, pojavio mi se neki virtual-access1 u listi interfejsa, kada izlasiam iz konsole kaze da je up, a kada udjem u SDM, kaze da je down, probao sam neke komande debug, ali nista mi nije izaslo, koje bih debug komande mogao da unesem da bi bilo koji log izasao da vidim da li se ista desava?
[Ovu poruku je menjao zeenmc dana 16.11.2012. u 23:51 GMT+1]
[ optix @ 16.11.2012. 23:56 ] @
Razvlacimo se nepotrebno sa trivijalnom konfiguracijom. Informacije dajes na kasicicu, uz to su jos polu-informacije. Neko ko je prosao ccna akademiju trebalo bi da zna da cisco prikazuje L1 i L2 status interfejsa. Kada kazes "interfejs je up" to ne znaci jednoznacno da je taj interfejs operativan. Da si rekao interfejs je up/up (npr. ATM0/1/0 is up, line protocol is up), to bi vec bilo nesto drugo, inace mozemo da gatamo da li se line protocol podigao ili nije.
Prodji ovu temu od pocetka, imas u nekoj od mojih poruka show komande koje pomazu dijagnostikovanju problema, posalji output toga i posalji relevantnu konfiguraciju ako ocekujes da ti neko pomogne. Ovako samo gubimo vreme...
[ zeenmc @ 17.11.2012. 10:24 ] @
Podrazumevao sam da je u pitanju up/up i down/down, vise verujem terminalu, te je iz tog razloga on i ukljucen, a probao sam i preko sdm i ccp da resim problem, na njima se prikazuje up/up a u konzoli down/down, s tim da sam menjao enkasulaciju, i neko vreme je bio up/up i u terminalu i na sdm/ccp, ni u jednom trenutku stanje L1/L2 sloja up/down ili down/up, konfiguracija jeste trivijalna, imam jos jedan ruter iz serije 800, samo je bez IOS-a, te cu mu instalirati IOS i snjim probati da uspostavim vezu sa dslam-om
[ zeenmc @ 20.11.2012. 17:31 ] @
Na samom WIC-u postoje 3 lampice, kada kabal nije ubacen u WIC, trepce skroz leva, ispod lampice pise CD, pored nje se nalazi lampica LP, i na kraju OK, koja uvek svetli, kada se stavi kabal posle par trenutaka, pocne konstantno da svetli i prva lampica, tj CD, kada sam sve podesio dobio sam interface Virtual-Access1, koji konstantno prelazi iz stanja up/up u down/down, dole je output sh pppoe session, par puta je umesto SHUTDOWN pisalo i je i PADRSNT
Potkrala mi se greska, tek sam danas video da sam kopirao sh ip int atm0/1/0 kad je kabal vec bio izvadjen, u outputu pise down/down, ali je tacno up/up, uglavnom namestio sam adsl, sada sljaka, greska je bila u PPPoE, verujem da je razlog bila autentifikacija, pretpostavljam da sam stavljao uvek 7 uz ppp pap username i pass
Zahvaljujem :)
Citat: R2611#sh pppoe session
1 client session
Uniq ID PPPoE RemMAC Port Source VA State
SID LocMAC VA-st
N/A 1965 0030.8813.3657 ATM0/0 Di1 N/A SHUTDOWN
000c.3043.ee80 VC: 8/35
R2611#
Citat: R2611#sh ip int brief
Interface IP-Address OK? Method Status Protocol
ATM0/0 unassigned YES manual up up
FastEthernet0/0 unassigned YES unset administratively down down
FastEthernet0/1 10.0.0.2 YES manual up up
Serial0/1 unassigned YES unset administratively down down
Serial1/0 unassigned YES unset administratively down down
Serial1/1 unassigned YES unset administratively down down
Serial1/2 unassigned YES unset administratively down down
Serial1/3 unassigned YES unset administratively down down
NVI0 unassigned NO unset up up
Virtual-Access1 unassigned YES unset down down
Dialer1 unassigned YES manual up up
Citat: R2611#sh interfaces atM 0/0
ATM0/0 is down, line protocol is down
Hardware is DSLSAR (with Alcatel ADSL Module)
MTU 4470 bytes, sub MTU 4470, BW 512 Kbit/sec, DLY 1000 usec,
reliability 244/255, txload 1/255, rxload 1/255
Encapsulation ATM, loopback not set
Encapsulation(s): AAL5 AAL2, PVC mode
23 maximum active VCs, 256 VCs per VP, 0 current VCCs
VC Auto Creation Disabled.
VC idle disconnect time: 300 seconds
Last input 00:03:06, output 00:03:04, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 3
Queueing strategy: Per VC Queueing
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
994 packets input, 58352 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
844 packets output, 62999 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 unknown protocol drops
0 output buffer failures, 0 output buffers swapped out
Deo output-a komande debug ppp auth
Citat:
r 1 05:13:18.983: %DIALER-6-BIND: Interface Vi1 bound to profile Di1
*Mar 1 05:13:18.983: Vi1 PPP: Phase is DOWN, Setup
*Mar 1 05:13:18.983: Vi1 PPP: Using dialer call direction
*Mar 1 05:13:18.983: Vi1 PPP: Treating connection as a callout
*Mar 1 05:13:18.983: Vi1 PPP: Session handle[52000136] Session id[0]
*Mar 1 05:13:18.987: Vi1 PPP: Phase is ESTABLISHING, Active Open
*Mar 1 05:13:18.987: Vi1 LCP: O CONFREQ [Closed] id 1 len 19
*Mar 1 05:13:18.987: Vi1 LCP: MRU 1492 (0x010405D4)
*Mar 1 05:13:18.987: Vi1 LCP: AuthProto CHAP (0x0305C22305)
*Mar 1 05:13:18.987: Vi1 LCP: MagicNumber 0x0C893969 (0x05060C893969)
*Mar 1 05:13:18.991: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up
*Mar 1 05:13:19.111: Vi1 LCP: I CONFREQ [REQsent] id 152 len 18
*Mar 1 05:13:19.111: Vi1 LCP: MRU 1480 (0x010405C8)
*Mar 1 05:13:19.111: Vi1 LCP: AuthProto PAP (0x0304C023)
*Mar 1 05:13:19.111: Vi1 LCP: MagicNumber 0x4B82FA67 (0x05064B82FA67)
*Mar 1 05:13:19.115: Vi1 LCP: O CONFNAK [REQsent] id 152 len 8
*Mar 1 05:13:19.115: Vi1 LCP: MRU 1492 (0x010405D4)
*Mar 1 05:13:19.115: Vi1 LCP: I CONFREJ [REQsent] id 1 len 9
*Mar 1 05:13:19.115: Vi1 LCP: AuthProto CHAP (0x0305C22305)
*Mar 1 05:13:19.115: Vi1 LCP: O CONFREQ [REQsent] id 2 len 19
*Mar 1 05:13:19.119: Vi1 LCP: MRU 1492 (0x010405D4)
*Mar 1 05:13:19.119: Vi1 LCP: AuthProto CHAP (0x0305C22305)
*Mar 1 05:13:19.119: Vi1 LCP: MagicNumber 0x0C893969 (0x05060C893969)
*Mar 1 05:13:19.123: Vi1 LCP: I CONFREQ [REQsent] id 153 len 18
*Mar 1 05:13:19.123: Vi1 LCP: MRU 1492 (0x010405D4)
*Mar 1 05:13:19..
Success rate is 0 percent (0/5)
R2611(config)#127: Vi1 LCP: AuthProto PAP (0x0304C023)
*Mar 1 05:13:19.127: Vi1 LCP: MagicNumber 0x4B82FA67 (0x05064B82FA67)
*Mar 1 05:13:19.127: Vi1 LCP: O CONFACK [REQsent] id 153 len 18
*Mar 1 05:13:19.127: Vi1 LCP: MRU 1492 (0x010405D4)
*Mar 1 05:13:19.127: Vi1 LCP: AuthProto PAP (0x0304C023)
*Mar 1 05:13:19.127: Vi1 LCP: MagicNumber 0x4B82FA67 (0x
Copyright (C) 2001-2024 by www.elitesecurity.org. All rights reserved.
|