MPLS VPN internet access using L2TP

[ianwarb]

I am trying to configure an MPLS VPN for internet access using L2TP and Radius. I have a dial up user account being dynamically assigned to a VRF which works fine and can see the other end of the VPN. I cannot, however, seem to get internet access working by leaking a route to the global internet. I have read the documentation which explains a standard static site VRF with a static route using the 'global' option, but the dial account uses a dynamic Virtual Interface that is different every time the user logs on and is connected to the LNS. Any help would be appreciated.

[carenas123]

Try this site, you might find some useful tip.

http://www.cisco.com/en/US/netsol/ns341/ns396/ns172/ns126/networking_solutions_package.html

[ashraf.ali]

You can do "Per-vrf AAA option on RADIUS" to overcome his problem. In this case vrf will be applied dynamically over the virtual-access interfaces using the attributes returned by the RADIUS server.

[ianwarb]

We are assigning a dynamic VRF on a per customer basis using radius, which works fine with the VPN, but i don't understand how this can be used for global internet access??