RE: Radius Connectivity for MPLS VRF Forwarding and L2TP Tunnels

Hi,

 

The fix came via the LNS. Apparently the main issue was the router sending the Radius attributes in a non-standard format. For that the command on the router was:
#radius-server host <IP> auth-port 1812 acct-port 1813 non-standard key <key>.

 

Regarding the VRF forwarding through the RADIUS the following lines in the users file helped:

user  Auth-Type = Local, Password ="xyz", Simultaneous-Use = 1

        Port-Limit = 1,

        Service-Type = Framed-User,

        Framed-Protocol = PPP,

        Framed-MTU = 1500,

        Framed-IP-Address = 192.168.1.1,

        Framed-IP-Netmask = 255.255.255.255,

        Cisco-AVPair = "lcp:interface-config=ip vrf forwarding VPNA",

        Cisco-AVPair = "lcp:interface-config=ip unnumbered loopback 1",

        Cisco-AVPair = "lcp:interface-config=peer default ip address pool dialin"

 

Rgds

Pratik

 

 

Hi All,

 

I need some help regarding the configuration of Cistron RADIUS for MPLS VRF Forwarding and L2TP Tunnels.

 

The setup is as follows:

A client dials to the NAS in this case a Cisco AS5400 for his backup link to the Service Provider MPLS Cloud. The Radius replies back with the attributes required for setting up a L2TP tunnel between the AS5400 (LAC – L2TP Access Concentrator) and a Cisco 7206 router (LNS – L2TP Network Server). The following is the entry in the RADIUS users file for setting this up –

test Auth-Type = Local, Password = "test", Simultaneous-Use =1

        Port-Limit =1 ,

        Service-Type = Framed-User,

        Framed-Protocol = PPP,

        Framed-MTU = 1500,

        Tunnel-Type = L2TP,

        Tunnel-Server-Endpoint = 10.10.10.1,

        Framed-IP-Address = 10.66.8.211,

        Framed-IP-Netmask = 255.255.255.255

 

Is this configuration enough or do I need to add additional attributes?

 

Secondly the Radius also needs to forward attributes regarding the VRF of the customer. The VRF details are maintained in the PE router of the MPLS cloud. What changes are needed to be made in the users file?

 

Many Thanks.

 

Rgds

Pratik Singh