12-18-2015 05:39 AM - edited 03-05-2019 02:57 AM
Hallo,
i will change my config vom IOS to IOS-XR(ASR9K)
old config:
aaa new-model
!
!
aaa group server radius mdlink
server xxx.xxx.xxx.xxx auth-port 1812 acct-port 1813
deadtime 5
!
aaa authentication ppp default group mdlink
aaa authorization network default group mdlink
aaa accounting delay-start
aaa accounting network default start-stop group mdlink
!
!
aaa session-id common
vpdn enable
vpdn logging
vpdn logging local
vpdn logging remote
vpdn logging user
vpdn logging tunnel-drop
vpdn search-order domain
vpdn domain-delimiter @ suffix
!
vpdn-group dsl
accept-dialin
protocol l2tp
virtual-template 1
terminate-from hostname asXXX-to-AS-ME
source-ip xxx.xxx.xxx.xxx
lcp renegotiation on-mismatch
l2tp tunnel password 7 12345678
l2tp tunnel receive-window 1024
!
no virtual-template subinterface
no virtual-template snmp
interface Virtual-Template1
description DSL
mtu 1460
ip unnumbered Loopback1
no ip redirects
no ip proxy-arp
ip tcp adjust-mss 1420
no peer default ip address
ppp authentication pap
ppp multilink
ppp multilink fragment disable
!
radius-server attribute nas-port format d
radius-server host xxx.xxx.xxx.xxx auth-port 1812 acct-port 1813 timeout 8
radius-server key 7 123456789
radius-server vsa send accounting
radius-server vsa send authentication
this work fine
this is my IOS-XR config:
radius-server host xxx.xxx.xxx.xxx auth-port 1812 acct-port 1813
key 7 12345678
!
aaa group server radius mdlink
server xxx.xxx.xxx.xxx.xxx auth-port 1812 acct-port 1813
deadtime 5
source-interface Loopback0
!
aaa authorization network default group mdlink
aaa authentication ppp default group mdlink
pool vrf default ipv4 DSL-Pool
address-range xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx
dynamic-template
type ppp PPP_TPL
ppp authentication chap pap ms-chap
ppp ipcp peer-address pool DSL-Pool
ipv4 unnumbered Loopback1
vpdn
history failure
logging local
logging user
logging cause normal
logging dead-cache
logging tunnel-drop
template dsl-templ
l2tp-class dsl-class
!
l2tp-class dsl-class
authentication
receive-window 1024
hostname asxxx-to-AS-ME
password 7 12345678
digest check disable
congestion-control
!
the radius is OK, a the l2tp not work.
Can i help me.
Regards
12-20-2015 11:38 PM
Hello,
i found the problem. The ASK9K hav not LNS.
Thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide