hello everyone,
I have a problem like this
We will move from mikrotik to cisco asr9k bng,
I made all the configs to run it as pppoe bras on the bng side, but
No PADI, etc. in debug aaa, radius, ppp, pppoe logs. information is not coming
I connected the modem directly to the dedicated port and it still did not work.
radius-server vsa attribute ignore unknown
radius-server host x.x.x.x auth-port 1812 acct-port 1813
key 7 1446405858517C7C7C71
!
radius-server host 192.251.68.8 auth-port 1812 acct-port 1813
key 7 00554155500E5D51
!
aaa server radius dynamic-author
port 1700
client 192.251.68.8 vrf default
server-key 7 08701E1D5D4C53404A52
!
client x.x.x.x vrf default
server-key 7 014254570F5E505879150E
!
!
aaa accounting network default start-stop group GLOBAL-RAD
aaa group server radius GLOBAL-RAD
server x.x.x.x auth-port 1812 acct-port 1813
server 192.251.68.8 auth-port 1812 acct-port 1813
!
aaa authentication ppp default group GLOBAL-RAD
radius-server vsa attribute ignore unknown
radius-server host x.x.x.x auth-port 1812 acct-port 1813
key 7 1446405858517C7C7C71
!
radius-server host 192.251.68.8 auth-port 1812 acct-port 1813
key 7 00554155500E5D51
!
aaa server radius dynamic-author
port 1700
client 192.251.68.8 vrf default
server-key 7 08701E1D5D4C53404A52
!
client x.x.x.x vrf default
server-key 7 014254570F5E505879150E
dynamic-template
type ppp BNG-RAD
ppp authentication pap chap
ppp ipcp dns 185.x.x.x 185.x.x.x
ppp ipcp peer-address pool BNG_POOL
accounting aaa list default type session periodic-interval 5
ipv4 unnumbered Loopback13
!
pppoe bba-group RAD-PPPOE
service selection disable
subscriber
pta tcp mss-adjust 1430
interface Bundle-Ether50.3
service-policy type control subscriber PPP_MAP-RAD
pppoe enable bba-group RAD-PPPOE
encapsulation dot1q 3
class-map type control subscriber match-any PPP
match protocol ppp
end-class-map
policy-map type control subscriber PPP_MAP-RAD
event session-start match-first
class type control subscriber PPP do-until-failure
10 activate dynamic-template BNG-RAD
!
!
event session-activate match-first
class type control subscriber PPP do-until-failure
10 authenticate aaa list default
!
!
end-policy-map
RP/0/RSP0/CPU0:BNG-ROUTER#sh ppp interfaces Bundle-Ether50.3
Sat Jan 24 07:38:07.885 UTC
Unable to get interface data for Bundle-Ether50.3: 'sysdb' detected the 'warning' condition 'A SysDB client tried to access a nonexistent item or list an empty directory'
RP/0/RSP0/CPU0:BNG-ROUTER#sh pppoe int Bundle-Ether50.3
Sat Jan 24 07:38:24.483 UTC
Specified interface Bundle-Ether50.3 is not a PPPoE subscriber interface
This pppoe is a very simple configuration that can run even on a simple L3 switch without doing anything extra, but my problem is that ASR9K does not run and detect these messages.
I tested the radius
When I do the "test aaa" test via asr9k and check the radius server with TCP dump, I can see that the packages are authenticated correctly.
So there is no access problem between radius and asr9k
Our modems are of different brands, but pppoe ones work with normal copper cat5 port, not with isdn port.
I write the username and password and it gets the IP address and connects to the internet.
note: I also have nexus 7k on the systems, I tested it on the spine switch and it works.
I don't think there is a problem with the config
RP/0/RSP0/CPU0:BNG-ROUTER#sh pppoe limits active access-interface bundle-ether$
Sat Jan 24 10:33:19.750 UTC
Specified group is not a PPPoE BBA Group
Access-interface Bundle-Ether50.3
---------------------------------
Access-interface session limits not configured.
MAC-Access-Interface session limits not configured.
MAC-IWF-Access-Interface session limits not configured.
Inner-VLAN-ID session limits not configured.
Outer-VLAN-ID session limits not configured.
VLAN-ID session limits not configured.
