cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
360
Views
0
Helpful
1
Replies

l2tp from IOS to IOS-XR change

Frank Patzig
Level 1
Level 1

Hallo,

i will change my config vom IOS to IOS-XR(ASR9K)

old config:

aaa new-model
!
!
aaa group server radius mdlink 
server xxx.xxx.xxx.xxx auth-port 1812 acct-port 1813
deadtime 5
!
aaa authentication ppp default group mdlink
aaa authorization network default group mdlink
aaa accounting delay-start
aaa accounting network default start-stop group mdlink
!
!
aaa session-id common

vpdn enable
vpdn logging
vpdn logging local
vpdn logging remote
vpdn logging user
vpdn logging tunnel-drop
vpdn search-order domain
vpdn domain-delimiter @ suffix
!
vpdn-group dsl
accept-dialin
protocol l2tp
virtual-template 1
terminate-from hostname asXXX-to-AS-ME
source-ip xxx.xxx.xxx.xxx
lcp renegotiation on-mismatch
l2tp tunnel password 7 12345678
l2tp tunnel receive-window 1024
!

no virtual-template subinterface
no virtual-template snmp

interface Virtual-Template1
description DSL
mtu 1460
ip unnumbered Loopback1
no ip redirects
no ip proxy-arp
ip tcp adjust-mss 1420
no peer default ip address
ppp authentication pap
ppp multilink
ppp multilink fragment disable

!

radius-server attribute nas-port format d
radius-server host xxx.xxx.xxx.xxx auth-port 1812 acct-port 1813 timeout 8
radius-server key 7 123456789
radius-server vsa send accounting
radius-server vsa send authentication

this work fine

this is my IOS-XR config:

radius-server host xxx.xxx.xxx.xxx auth-port 1812 acct-port 1813
key 7 12345678
!
aaa group server radius mdlink
server xxx.xxx.xxx.xxx.xxx auth-port 1812 acct-port 1813
deadtime 5
source-interface Loopback0
!
aaa authorization network default group mdlink
aaa authentication ppp default group mdlink

pool vrf default ipv4 DSL-Pool
address-range xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx

dynamic-template
type ppp PPP_TPL
ppp authentication chap pap ms-chap
ppp ipcp peer-address pool DSL-Pool
ipv4 unnumbered Loopback1

vpdn
history failure
logging local
logging user
logging cause normal
logging dead-cache
logging tunnel-drop
template dsl-templ
l2tp-class dsl-class

!

l2tp-class dsl-class
authentication
receive-window 1024
hostname asxxx-to-AS-ME
password 7 12345678
digest check disable
congestion-control
!

the radius is OK, a the l2tp not work.

Can i help me.

Regards

1 Reply 1

Frank Patzig
Level 1
Level 1

Hello,

i found the problem. The ASK9K hav not LNS.

Thanks

Review Cisco Networking for a $25 gift card