L2TP/RADIUS debug

[bsciadmin01]

Hi,

Running L2TP VPDN(ADSL) to 7204VXR.

Getting the following debug on LNS/Home Gateway:

RADIUS(00010153): sending

RADIUS(00010153): Send Access-Request to <RADIUS SERVER IP>:1645 id 1645/162, len 74

RADIUS: authenticator 1F B3 1E 1E B2 AD A3 ......F8

RADIUS: User-Name [1] 12 "dsl.net"

RADIUS: User-Password [2] 18 *

RADIUS: NAS-Port-Type [61] 6 Virtual [5]

RADIUS: NAS-Port [5] 6 486

RADIUS: Service-Type [6] 6 Outbound [5]

RADIUS: NAS-IP-Address [4] 6 <LNS IP>

RADIUS: Received from id 1645/162 <LNS IP>:1645, Access-Accept, len 32

RADIUS: authenticator 29 88 2A A5 17 BF 65 ...

RADIUS: Vendor, Ascend [26] 12

RADIUS: Ascend-Require-Auth [201] 6 1

RADIUS(00010153): Received from id 1645/162

RADIUS: AAA Unsupported [156] 15

RADIUS: 55 6E 69 71 65 73 73 ....

Can anyone explain what the above is? Obviously, this is being sourced from LNS but as an 'outbound' user to RADIUS, also with dsl.net, not a complete username. Saw something similar in a 'Good' debug on CCO. Maybe this is normal for L"TP/RADIUS setup?

Any help appreciated.

[mchin345]

The following link gives a detailed explanation for the debug message :

http://www.cisco.com/en/US/products/sw/iosswrel/ps5187/products_feature_guide09186a00801b0694.html

[JAN MARIS]

Your LNS (HGW) seems to be configured for pre-authentication with AAA (RADIUS). It parses the full username and looks for the domain name (this is the default, but you can change this with the "vpdn search-order" command.

This pre-auth behaviour is enabled when you configure a AAA method for network authorization against a AAA server group.

It seems that you possibly would not terminate the PPP session on this HGW, but tunnel it to another L2TP endpoint, but from this debug I can't tell whether the RADIUS has returnd the RFC2868 tunnel attributes.

Regards

Jan