06-12-2020 07:07 AM
Failed to send USER ATTRIBUTES in PPPOE ASR1004.
ASR-xxxxx#test aaa group radius xxxx@xxxxxx xxx123 new-code
User successfully authenticated
USER ATTRIBUTES
sub-policy-In 0 "500M-IN"
sub-policy-Out 0 "500M-OUT"
ASR-xxxxxx#
I need the framed-ip parameter to be sent
My configure
radius-server attribute 8 include-in-access-req
radius-server attribute 32 include-in-access-req
radius-server attribute 32 include-in-accounting-req
radius-server attribute 55 access-request include
radius-server attribute 61 extended
radius-server attribute 31 mac format ietf
radius-server attribute 31 send nas-port-detail
radius-server attribute 31 remote-id
radius-server attribute nas-port-id include vendor-class-id plus remote-id plus circuit-id
aaa accounting send stop-record authentication failure
aaa accounting update periodic 10
aaa accounting network default start-stop group radius
aaa accounting resource default start-stop group radius
!
06-12-2020 03:49 PM - edited 06-12-2020 03:58 PM
Usually, the Framed-IP-Address is a RADIUS attribute sent by the RADIUS server to the NAS (your ASR1004) in the Access-Accept message. You have to configure this attribute on your RADIUS server/database for the concerned user. Once the NAS has received the Framed-IP-Address, it will send it to the PPP client using IPCP.
In some cases, the NAS can ask for a particular IP address using this attribute as well in the Access-Request message but I've never seen this in a real use case and I doubt this is what you want to achieve.
Also, did you enable RADIUS debugging so that you can see all the returned RADIUS attributes?
06-13-2020 12:31 AM
Hello,
post the full running configuration of your ASR so we can see what else (e.g. address pool) you have configured...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide