cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1412
Views
5
Helpful
2
Replies

Problem in LNS router caused system to get down !!!!

Dr.X
Level 2
Level 2

hi ,

i have myem system with the topology  of ADSL ,  im as just an  ISP .

http://www.rracuares.com/wp-content/uploads/2010/07/PPPoE-over-L2TP.png

all my access is only on LNS router ,

in my LNS router , im configuring the AAA with radius server ,

actually i have two LNS router , and have load balancing from PSTN LAC to my LNS routers .

yesterday ,

on radius server , i cleared all the users which was on LNS1 , and cleared all users that were on router LNS1 ,

the problem appeared , when the users  agian come to the LNS ,

the problem was , alot of users  get a state of ""never "" when i type

#sh users  !!!!!!!!!!!!!!

here is a sample of output command :

as u see, alot of users didnt get an ip from router pool , and the pool has alot of free ips , but some users fall in the state "never " ===>look at the last coloum

LNS1#sh users | i never

  Vi145        xxxxxx8@netg PPPoVPDN    never   

  Vi224        xxxxxx8@netg PPPoVPDN     never   

  Vi290        xxxxxx11@netg PPPoVPDN    never   

  Vi469        xxxxxxx03@netg PPPoVPDN  never   

  Vi635        xxxxxxxx42@netg PPPoVPD   never   

  Vi718        xxxxxx860@netg PPPoVPDN   never   

  Vi1501       xxxxxxx54@netg PPPoVPDN   never   

  Vi1543       xxx494@netg PPPoVPDN      never   

  Vi1749       xxxxxx0742@netg PPPoVPDN  never   

  Vi1807       xxxx4194@netg PPPoVPDN    never   

  Vi2093       xxxxxx894@netg PPPoVPDN  never   

  Vi2158       xxxxxx5258@netg PPPoVPDN  never   

  Vi2211       xxx2524@netg PPPoVPDN     never   

  Vi2244       xxxx295@netg PPPoVPDN     never   

  Vi2416       xxx663@netgPPPoVPDN      never   

  Vi2606       xxxx49@netg PPPoVPDN      never   

  Vi2697       xxxx952@netg PPPoVPDN     never   

  Vi2994       xxxxx03@netg PPPoVPDN     never   

  Vi3216       xx7816@netg PPPoVPDN      never   

  Vi3324       xxxx293@neg PPPoVPDN     never   

  Vi3385       xx8036@netg PPPoVPDN      never

this problem got alot of time , and finally  i got my router reload  and ofcourse my system got down !!!!!

my question is , what is the reason of this problem ???????

why the problem solved when i reloaded the  LNS router ????

wish to help so as not to fall in the same problem 

i will include the sample of my LNS brief config that delas with  virtual template interface :

###########################################################

interface Virtual-Template1

ip unnumbered GigabitEthernet0/1

ip tcp adjust-mss 1480

no logging event link-status

peer default ip address pool p1 p2

ppp mtu adaptive

ppp authentication pap vpdn

ppp authorization vpdn

ppp accounting vpdn

##################################################

regards

Ahmad

2 Replies 2

Wajdi MEJRI
Level 1
Level 1

I have this problem too on Cisco ASR 1006 LNS router.

but problem is solved tanks to OTBS and CNTE.

i just add this commands:

!

radius server radauth
!

aaa group server radius radauth

server x.x.x.x auth-port 1812 acct-port 1813

server y.y.y.y auth-port 1812 acct-port 1813

authorization reply reject prohibited-attribute

deadtime 2

!

radius-server attribute list prohibited-attribute

attribute 13

!

the problem occurs when sending RADIUS attribute 13 (Framed-Compression)

so LNS should reject this attribute specified in the list prohibited-attribute for Access-Reply

hi ,

sounds complex issue

thanks alot very much for your reply ,

im really appreciating your help ,

i will try it and give you a reply with the result ,

with my best regards