I changed my radius client from "standard IEFT" to "Radius-Cisco VPN 3000" and then I set the values "CVPN3000-Primary-DNS" and "CVPN3000-Secondary-DNS" with the server's IP address.
But on client site (PPP dial-UP connection from microsoft operating systems), after normal connection completition, don't receive the value of the DNS.
The connection is based on two authentication steps:
1) the client call a phone number provide by Telco provider. Telco has a Radius server that check the realm (the value after @ character), if it is valid value, the Telco Radius proxy the request to my ACS Radius.
2) my ACS Radius know the Telco Radius as AAA client Radius, so it checks the value username@realm + password recived from Telco Radius. If it receive the correct value, the authorization process provide to client an IP address from pool and, in this phase, I try to provide to client the DNS.
All the process works properly execpt the DNS assignment.
The systems engineer from Telco provider reply me that the problem is probably on my ACS, because it doesn't be able to complete the authorization phase with standard IETF values ("135 Primary-DNS-Server" and "136 Secondary-DNS-Server"). The Telco Radius doesn't accept any vendors Av-pairs.
In standard documentation I found that the ACS Radius support this values (http://www.cisco.com/en/US/products/sw/secursw/ps5338/products_user_guide_chapter09186a008023360b.html)
but I didn't find in any configuration screen.
In your opinion where is my mistake?
Thanks.
