<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Courier New, monospace" size="2">
<div style="text-align: justify; "> </div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">!--- Configuration LTS</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">vpdn enable /* Activation du processus VPDN (LTS + LNS) */</div>
<div style="text-align: justify; ">vpdn multihop /* activation de la fonction LTS */</div>
<div style="text-align: justify; "><b>vpdn authen-before-forward</b> /* activation de la fonction LTS */</div>
<div style="text-align: justify; ">no vpdn history failure</div>
<div style="text-align: justify; ">vpdn search-order domain</div>
<div style="text-align: justify; ">vpdn domain-delimiter @ suffix /* Caractère marquant le début du realm */</div>
<div style="text-align: justify; ">!</div>
<div> </div>
<div>And the following is classical vpdn configuration.</div>
<div>And it is working with Radius Authentication</div>
<div> </div>
<div> </div>
<div> </div>
<div style="margin-top: 12pt; margin-bottom: 12pt; text-align: justify; "><font face="Arial, sans-serif" size="2"><span style="font-variant: small-caps;"><b>and the result on the LTS :</b></span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"> </font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF">RTRDOL53#show ppp all</span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF">Interface/ID OPEN+ Nego* Fail- Stage Peer Address Peer Name</span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF">------------ --------------------- -------- --------------- --------------------</span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF">Vi2.3 LCP+ CHAP+ IPCP+ LocalT xxxx\</span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF">test11ent@yyyy</span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF"><b>0x5E000036 LCP+ CHAP* Fwded 0.0.0.0 \</b></span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF"><b>lts2@</b></span><span style="background-color:#FFFFFF"><b>yyyy</b></span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF"><b>0x89000048 LCP+ CHAP* Fwded 0.0.0.0 \</b></span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF"><b>lts1@</b></span><span style="background-color:#FFFFFF"><b>yyyy</b></span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF">Vi2.5 LCP+ CHAP+ IPCP+ LocalT xxxx \</span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF">test14ent@zzzzz</span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF">RTRDOL53#</span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"> </font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"> </font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"> </font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"> </font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF">RTRDOL53#show subscriber session username lts1@yyyy</span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF">Unique Session ID: 928</span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF"><b>Identifier: lts1@</b></span><span style="background-color:#FFFFFF"><b>yyyy</b></span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF"><b>SIP subscriber access type(s): VPDN/PPP</b></span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF"><b>Current SIP options: Req Fwding/Req Fwded</b></span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF">Session Up-time: 19:47:52, Last Changed: 19:47:52</span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"> </font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF">Policy information:</span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF"><b> Authentication status: authen</b></span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"> </font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF">Configuration sources associated with this session:</span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF">Interface: Virtual-Template1, Active Time = 19:47:52</span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"> </font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"> </font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"> </font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF">RTRDOL53#show subscriber session username lts2@yyyy</span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF">Unique Session ID: 585</span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF"><b>Identifier: lts2@</b></span><span style="background-color:#FFFFFF"><b>yyyy</b></span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF"><b>SIP subscriber access type(s): VPDN/PPP</b></span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF"><b>Current SIP options: Req Fwding/Req Fwded</b></span></font></div>
<div style="text-align: justify; background-color: #D9D9D9;pt; "><font face="Lucida Console, monospace" size="1"><span style="background-color:#FFFFFF">Session Up-time: 17:25:57, Last Changed: 17:25:57</span></font></div>
<div> </div>
<div> </div>
<div> </div>
<div>-----Message d'origine-----<br>
De : cisco-bba-bounces@puck.nether.net [<a href="mailto:cisco-bba-bounces@puck.nether.net">mailto:cisco-bba-bounces@puck.nether.net</a>] De la part de cisco-bba-request@puck.nether.net<br>
Envoyé : mardi 15 février 2011 18:00<br>
À : cisco-bba@puck.nether.net<br>
Objet : cisco-bba Digest, Vol 89, Issue 4</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">Send cisco-bba mailing list submissions to</div>
<div style="text-align: justify; "> cisco-bba@puck.nether.net</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">To subscribe or unsubscribe via the World Wide Web, visit</div>
<div style="text-align: justify; "> <a href="https://puck.nether.net/mailman/listinfo/cisco-bba">https://puck.nether.net/mailman/listinfo/cisco-bba</a></div>
<div style="text-align: justify; ">or, via email, send a message with subject or body 'help' to</div>
<div style="text-align: justify; "> cisco-bba-request@puck.nether.net</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">You can reach the person managing the list at</div>
<div style="text-align: justify; "> cisco-bba-owner@puck.nether.net</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">When replying, please edit your Subject line so it is more specific</div>
<div style="text-align: justify; ">than "Re: Contents of cisco-bba digest..."</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">Today's Topics:</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; "> 1. Per-User Multihop VPDN (Matthew Melbourne)</div>
<div style="text-align: justify; "> 2. Re: Per-User Multihop VPDN (Paul Sherratt)</div>
<div style="text-align: justify; "> 3. Re: Per-User Multihop VPDN (Arie Vayner)</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">----------------------------------------------------------------------</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">Message: 1</div>
<div style="text-align: justify; ">Date: Tue, 15 Feb 2011 09:56:56 +0000</div>
<div style="text-align: justify; ">From: Matthew Melbourne <matt@melbourne.org.uk></div>
<div style="text-align: justify; ">To: cisco-bba@puck.nether.net</div>
<div style="text-align: justify; ">Subject: [cisco-bba] Per-User Multihop VPDN</div>
<div style="text-align: justify; ">Message-ID:</div>
<div style="text-align: justify; "> <AANLkTikik1r3gE8os5hjzA658uzCHsxuqZ8d5MQ=VQge@mail.gmail.com></div>
<div style="text-align: justify; ">Content-Type: text/plain; charset=ISO-8859-1</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">Hi,</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">I have a scenario where I would like to forward particular user</div>
<div style="text-align: justify; ">sessions from one LNS to another (which is VRF-aware), ideally under</div>
<div style="text-align: justify; ">the control of the RADIUS server used by the initial LNS. Is it</div>
<div style="text-align: justify; ">possible to specify RADIUS attributes which will forward a user's</div>
<div style="text-align: justify; ">session to another LNS, using Multihop VPDN?</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">Cheers,</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">Matt</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">-- </div>
<div style="text-align: justify; ">Matthew Melbourne</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">------------------------------</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">Message: 2</div>
<div style="text-align: justify; ">Date: Tue, 15 Feb 2011 10:30:41 +0000</div>
<div style="text-align: justify; ">From: Paul Sherratt <lists@paul.sh></div>
<div style="text-align: justify; ">To: Matthew Melbourne <matt@melbourne.org.uk></div>
<div style="text-align: justify; ">Cc: cisco-bba@puck.nether.net</div>
<div style="text-align: justify; ">Subject: Re: [cisco-bba] Per-User Multihop VPDN</div>
<div style="text-align: justify; ">Message-ID:</div>
<div style="text-align: justify; "> <AANLkTi=Z=npTbVBMm3WnTvYv2mXU-HrRVmnO=W0iX_dU@mail.gmail.com></div>
<div style="text-align: justify; ">Content-Type: text/plain; charset=ISO-8859-1</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">When a request comes in to RADIUS from the initial LNS, you just need</div>
<div style="text-align: justify; ">to chuck back a set VPDN tunnel attributes and the multihop should</div>
<div style="text-align: justify; ">'just work'.</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">There are two options,</div>
<div style="text-align: justify; ">- RADIUS Attribute 66:</div>
<div style="text-align: justify; "><a href="http://www.cisco.com/en/US/docs/ios/12_1t/12_1t5/feature/guide/dtdt4.html">http://www.cisco.com/en/US/docs/ios/12_1t/12_1t5/feature/guide/dtdt4.html</a></div>
<div style="text-align: justify; ">- <a href="http://www.cisco.com/en/US/docs/ios/12_2t/12_2t15/feature/guide/ftvpdnmh.html#wp1044693">
http://www.cisco.com/en/US/docs/ios/12_2t/12_2t15/feature/guide/ftvpdnmh.html#wp1044693</a></div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">We primarily use the first, but if you need to multihop into a</div>
<div style="text-align: justify; ">VRF-aware VPDN group, you'll need the latter.</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">-pts</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">On 15 February 2011 09:56, Matthew Melbourne <matt@melbourne.org.uk> wrote:</div>
<div style="text-align: justify; ">> Hi,</div>
<div style="text-align: justify; ">></div>
<div style="text-align: justify; ">> I have a scenario where I would like to forward particular user</div>
<div style="text-align: justify; ">> sessions from one LNS to another (which is VRF-aware), ideally under</div>
<div style="text-align: justify; ">> the control of the RADIUS server used by the initial LNS. Is it</div>
<div style="text-align: justify; ">> possible to specify RADIUS attributes which will forward a user's</div>
<div style="text-align: justify; ">> session to another LNS, using Multihop VPDN?</div>
<div style="text-align: justify; ">></div>
<div style="text-align: justify; ">> Cheers,</div>
<div style="text-align: justify; ">></div>
<div style="text-align: justify; ">> Matt</div>
<div style="text-align: justify; ">></div>
<div style="text-align: justify; ">> --</div>
<div style="text-align: justify; ">> Matthew Melbourne</div>
<div style="text-align: justify; ">> _______________________________________________</div>
<div style="text-align: justify; ">> cisco-bba mailing list</div>
<div style="text-align: justify; ">> cisco-bba@puck.nether.net</div>
<div style="text-align: justify; ">> <a href="https://puck.nether.net/mailman/listinfo/cisco-bba">
https://puck.nether.net/mailman/listinfo/cisco-bba</a></div>
<div style="text-align: justify; ">></div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">------------------------------</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">Message: 3</div>
<div style="text-align: justify; ">Date: Tue, 15 Feb 2011 15:25:42 +0200</div>
<div style="text-align: justify; ">From: Arie Vayner <ariev@vayner.net></div>
<div style="text-align: justify; ">To: lists@paul.sh</div>
<div style="text-align: justify; ">Cc: Matthew Melbourne <matt@melbourne.org.uk>,</div>
<div style="text-align: justify; "> cisco-bba@puck.nether.net</div>
<div style="text-align: justify; ">Subject: Re: [cisco-bba] Per-User Multihop VPDN</div>
<div style="text-align: justify; ">Message-ID:</div>
<div style="text-align: justify; "> <AANLkTikszAxYN_BHH6SSR29Xb3BsLswQ7-eDuCPvfPFA@mail.gmail.com></div>
<div style="text-align: justify; ">Content-Type: text/plain; charset="iso-8859-1"</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">You also need the following command on the LNS:</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">*authen-before-forward *</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; "><a href="http://www.cisco.com/en/US/docs/ios/vpdn/command/reference/vpd_a1.html#wp1047138">http://www.cisco.com/en/US/docs/ios/vpdn/command/reference/vpd_a1.html#wp1047138</a></div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">Arie</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">On Tue, Feb 15, 2011 at 12:30 PM, Paul Sherratt <lists@paul.sh> wrote:</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">> When a request comes in to RADIUS from the initial LNS, you just need</div>
<div style="text-align: justify; ">> to chuck back a set VPDN tunnel attributes and the multihop should</div>
<div style="text-align: justify; ">> 'just work'.</div>
<div style="text-align: justify; ">></div>
<div style="text-align: justify; ">> There are two options,</div>
<div style="text-align: justify; ">> - RADIUS Attribute 66:</div>
<div style="text-align: justify; ">> <a href="http://www.cisco.com/en/US/docs/ios/12_1t/12_1t5/feature/guide/dtdt4.html">
http://www.cisco.com/en/US/docs/ios/12_1t/12_1t5/feature/guide/dtdt4.html</a></div>
<div style="text-align: justify; ">> -</div>
<div style="text-align: justify; ">> <a href="http://www.cisco.com/en/US/docs/ios/12_2t/12_2t15/feature/guide/ftvpdnmh.html#wp1044693">
http://www.cisco.com/en/US/docs/ios/12_2t/12_2t15/feature/guide/ftvpdnmh.html#wp1044693</a></div>
<div style="text-align: justify; ">></div>
<div style="text-align: justify; ">> We primarily use the first, but if you need to multihop into a</div>
<div style="text-align: justify; ">> VRF-aware VPDN group, you'll need the latter.</div>
<div style="text-align: justify; ">></div>
<div style="text-align: justify; ">> -pts</div>
<div style="text-align: justify; ">></div>
<div style="text-align: justify; ">></div>
<div style="text-align: justify; ">> On 15 February 2011 09:56, Matthew Melbourne <matt@melbourne.org.uk></div>
<div style="text-align: justify; ">> wrote:</div>
<div style="text-align: justify; ">> > Hi,</div>
<div style="text-align: justify; ">> ></div>
<div style="text-align: justify; ">> > I have a scenario where I would like to forward particular user</div>
<div style="text-align: justify; ">> > sessions from one LNS to another (which is VRF-aware), ideally under</div>
<div style="text-align: justify; ">> > the control of the RADIUS server used by the initial LNS. Is it</div>
<div style="text-align: justify; ">> > possible to specify RADIUS attributes which will forward a user's</div>
<div style="text-align: justify; ">> > session to another LNS, using Multihop VPDN?</div>
<div style="text-align: justify; ">> ></div>
<div style="text-align: justify; ">> > Cheers,</div>
<div style="text-align: justify; ">> ></div>
<div style="text-align: justify; ">> > Matt</div>
<div style="text-align: justify; ">> ></div>
<div style="text-align: justify; ">> > --</div>
<div style="text-align: justify; ">> > Matthew Melbourne</div>
<div style="text-align: justify; ">> > _______________________________________________</div>
<div style="text-align: justify; ">> > cisco-bba mailing list</div>
<div style="text-align: justify; ">> > cisco-bba@puck.nether.net</div>
<div style="text-align: justify; ">> > <a href="https://puck.nether.net/mailman/listinfo/cisco-bba">
https://puck.nether.net/mailman/listinfo/cisco-bba</a></div>
<div style="text-align: justify; ">> ></div>
<div style="text-align: justify; ">> _______________________________________________</div>
<div style="text-align: justify; ">> cisco-bba mailing list</div>
<div style="text-align: justify; ">> cisco-bba@puck.nether.net</div>
<div style="text-align: justify; ">> <a href="https://puck.nether.net/mailman/listinfo/cisco-bba">
https://puck.nether.net/mailman/listinfo/cisco-bba</a></div>
<div style="text-align: justify; ">></div>
<div style="text-align: justify; ">-------------- next part --------------</div>
<div style="text-align: justify; ">An HTML attachment was scrubbed...</div>
<div style="text-align: justify; ">URL: <<a href="https://puck.nether.net/pipermail/cisco-bba/attachments/20110215/ab8464b7/attachment-0001.html">https://puck.nether.net/pipermail/cisco-bba/attachments/20110215/ab8464b7/attachment-0001.html</a>></div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">------------------------------</div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">_______________________________________________</div>
<div style="text-align: justify; ">cisco-bba mailing list</div>
<div style="text-align: justify; ">cisco-bba@puck.nether.net</div>
<div style="text-align: justify; "><a href="https://puck.nether.net/mailman/listinfo/cisco-bba">https://puck.nether.net/mailman/listinfo/cisco-bba</a></div>
<div style="text-align: justify; "> </div>
<div style="text-align: justify; ">End of cisco-bba Digest, Vol 89, Issue 4</div>
<div style="text-align: justify; ">****************************************</div>
<div style="text-align: justify; "> </div>
<div><font face="Times New Roman, serif" size="3"><br>
</font></div>
<div><font face="Times New Roman, serif" size="3"><u> ________________________________ </u></font></div>
<div><font face="Arial, sans-serif" size="1" color="#808080">L'intégrité de ce message n'étant pas assurée sur internet, la société expéditrice ne peut être tenue responsable de son contenu ni de ses pièces jointes. Toute utilisation ou diffusion non autorisée
est interdite. Si vous n'êtes pas destinataire de ce message, merci de le détruire et d'avertir l'expéditeur.<br>
<br>
The integrity of this message cannot be guaranteed on the Internet. The company that sent this message cannot therefore be held liable for its content nor attachments. Any unauthorized use or dissemination is prohibited. If you are not the intended recipient
of this message, then please delete it and notify the sender.<br>
</font></div>
</font>
</body>
</html>