[c-nsp] Telstra ADSL pix firewall running 6.3

2008-02-15 Thread Joseph Jackson
Hey all,

Anyone have any experince with setting up a pix firewall with Telstras
buisness ADSL?

I have a pix in sydney that I've been trying to get online but I am running
into some show stoppers.

Here is the relavent config from the pix


ip address outside 165.228.203.90 255.255.255.0  pppoe setroute (I've tried
this with out the IP address also)

vpdn group pppoex request dialout pppoe

vpdn group pppoex localname [EMAIL PROTECTED]

vpdn group pppoex ppp authentication chap

vpdn username [EMAIL PROTECTED] password *
All the commands go in ok but when I do a debug pppoe packets it looks like
the pix can't find the pppoe server.  It does the discovery but never gets a
response so fails.  The telstra setup email includes an ATM VPI/VCI number
but the pix doesn't support that (I'm guessing its only for routers).  I do
not have outband access to the device and have been working with the
datacenters smarthands through webex (love it).

I haven't been able to get in touch with Telstra as its the weekend over
there but I was wondering if you guys have come across this issue before.

Thanks!

Joseph
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Telstra ADSL pix firewall running 6.3

2008-02-15 Thread Adrian Chadd
On Fri, Feb 15, 2008, Joseph Jackson wrote:

 vpdn username [EMAIL PROTECTED] password *
 All the commands go in ok but when I do a debug pppoe packets it looks like
 the pix can't find the pppoe server.  It does the discovery but never gets a
 response so fails.  The telstra setup email includes an ATM VPI/VCI number
 but the pix doesn't support that (I'm guessing its only for routers).  I do
 not have outband access to the device and have been working with the
 datacenters smarthands through webex (love it).

 I haven't been able to get in touch with Telstra as its the weekend over
 there but I was wondering if you guys have come across this issue before.

Uhm, do you understand how its all meant to hold together?
If its a normal DSL service today then its PPP of some sort over ethernet
of some sort over an ATM VC. You've got a modem device that has the VPI/VCI
correctly configured, and acting as a real bridge?



Adrian
(Who does that sort of stuff in Australia for a living .. occasionally.)

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/