Simple Question

[jimb]

Can an Ascend LAC set up a vpdn l2tp tunnel with a Cisco LNSusing radius attributes? Surely somebody at Cisco knows whether or not this can be done. From what I can tell, Cisco does not support IETF attributE 68 for the tunnel password, and forces the use of Cisco AVpairs to send the password, which an Ascend LAC does not understand. Is this true?

[jsivulka]

IETF Tunnel-Password attribute is numbered 69 (not 68) and is supported version 12.1 onwards. (Attribute 68 too is supported version 12.1 onwards). I think it is worth pointing out that when using attribute 69, all passwords rx'ed are encrypted. When a NAS tries to decypt a password that was not encrypted in the first place, this might result in authorization faliures. Use the 'radius-server attribute 69 clear' command receive nonencrypted tunnel passwords. More information about this command is available at http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fsecur_r/fssprocr/srfrad.htm#1039165