<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><title>LNS Error on Cisco ASR 1004</title><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-AU link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Try “test virtual-template X subinterface”<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> cisco-bba-bounces@puck.nether.net [mailto:cisco-bba-bounces@puck.nether.net] <b>On Behalf Of </b>Dominic<br><b>Sent:</b> Thursday, 3 January 2013 10:52 AM<br><b>To:</b> cisco-bba@puck.nether.net<br><b>Subject:</b> [cisco-bba] LNS Error on Cisco ASR 1004<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Happy New Year everyone!</span><o:p></o:p></p><p><span lang=EN-US style='font-family:"Calibri","sans-serif"'>We currently use Cisco 7206 LNS(es). Everything works great. But we are now looking to migrate LNS functions from the 7206 to an ASR 1004. Thought it would be a straightforward thing, but for some reason, the ASR keeps barking up this error: </span><o:p></o:p></p><p><b><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>"%FMANRP_ESS-4-FULLVAI: Session creation failed due to Full Virtual-Access Interfaces not being supported. Check that all applied Virtual-Template and RADIUS features support Virtual-Access sub-interfaces. swidb=</span></i></b><o:p></o:p></p><p><b><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>0x7FEDB5942B98, ifnum= 37</span></i></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>"</span><o:p></o:p></p><p><span lang=EN-US style='font-family:"Calibri","sans-serif"'>The funny thing is, if the CPE is a Cisco 1841, the pppoe negotiation is successfully negotiated, and everything works great. If some other CPE however, we end up with the above error. </span><o:p></o:p></p><p><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Any idea what we are doing wrong? </span><o:p></o:p></p><p><span lang=EN-US style='font-family:"Calibri","sans-serif"'>1. </span><span lang=EN-US> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Here is the relevant cisco config on the ASR -</span><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>aaa new-model</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>aaa group server radius adslRADIUS</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> server x.x.xx.60 auth-port 1812 acct-port 1813</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> server x.x.50.xx auth-port 1812 acct-port 1813</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> deadtime 15</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>!</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>aaa authentication login default local</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>aaa authentication ppp hawVPDN group adslRADIUS</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>aaa authorization network hawVPDN group adslRADIUS </span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>aaa authorization auth-proxy default group adslRADIUS </span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>aaa accounting delay-start</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>aaa accounting update periodic 5</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>!</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>sgbp group bondadsl</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>sgbp member lns2-dsl x.x.xx.243</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>sgbp member lns1-dsl x.x.xx.242</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>sgbp member Aggr.RT2 x.x.xx.232</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>!</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>virtual-profile virtual-template 1</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>!</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>multilink virtual-template 1</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>multilink bundle-name authenticated</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>vpdn enable</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>vpdn multihop</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>vpdn logging</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>vpdn logging user</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>vpdn logging tunnel-drop</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>vpdn history failure table-size 50</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>!</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>vpdn-group adsl-ADSL</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> ! Default L2TP VPDN group</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> accept-dialin</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> protocol l2tp</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> virtual-template 1</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> lcp renegotiation always</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> l2tp tunnel password 7 xxxxxxxxxxxx</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> ip pmtu</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> ip mtu adjust</span></i><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>!</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>interface Virtual-Template1</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> description adsl-ADSL-STATIC</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> mtu 1492</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> ip unnumbered GigabitEthernet0/2/0.34</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> no ip redirects</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> no ip proxy-arp</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> ip verify unicast reverse-path</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> ip tcp adjust-mss 1420</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> no logging event link-status</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> no peer default ip address</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> ppp mtu adaptive</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> ppp authentication pap hawVPDN</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> ppp authorization hawVPDN</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> ppp accounting hawVPDN</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> ppp chap refuse</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> ppp ipcp dns xx.xx.xx.234 xx.xx.xx.235</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> ppp multilink</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>!</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>radius-server host x.x.xx.60 auth-port 1812 acct-port 1813 key 7 xxxxxxxxxxx</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>radius-server host x.x.xx.61 auth-port 1812 acct-port 1813 key 7 xxxxxxxxxxx</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>radius-server retransmit 1</span></i><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>------------------------</span></i><o:p></o:p></p><p><span lang=EN-US style='font-family:"Calibri","sans-serif"'>2. Here are the attributes from the radius server:</span><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>----------------------</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>mysql> select * from radgroupreply where GroupName = 'telco1-pppoe-static' ;</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>+-----+--------------------+------------------------+----+--------------------------------</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>---------------------------+</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>| id | GroupName | Attribute | op | Value </span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'> |</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>+-----+--------------------+------------------------+----+--------------------------------</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>| 60 | telco1-pppoe-static | Service-Type | := | Framed-User |</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>| 61 | telco1-pppoe-static | Framed-Protocol | := | PPP </span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>| 62 | telco1-pppoe-static | Framed-IP-Netmask | := | 255.255.255.255 </span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>| 65 | telco1-pppoe-static | Tunnel-Server-Endpoint | += | :3:xx.xx.xx.171 </span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>| 66 | telco1-pppoe-static | Tunnel-Server-Endpoint | += | :2:xx.xx.xx.172 </span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>| 67 | telco1-pppoe-static | Tunnel-Password | += | :1:xxx.XXTxxx </span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>| 68 | telco1-pppoe-static | Tunnel-Password | += | :2:xxx.XXTxxx </span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>| 69 | telco1-pppoe-static | Tunnel-Preference | += | :1:10 </span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>| 70 | telco1-pppoe-static | Tunnel-Preference | += | :2:10 </span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'> | 71 | telco1-pppoe-static | Tunnel-Medium-Type | += | :1:IP </span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'> | 72 | telco1-pppoe-static | Tunnel-Type | += | :1:L2TP </span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>| 73 | telco1-pppoe-static | Tunnel-Medium-Type | += | :2:IP </span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>| 74 | telco1-pppoe-static | Tunnel-Type | += | :2:L2TP </span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>| 123 | telco1-pppoe-static | Cisco-Avpair | += | interface-config=ppp ipcp dns xx.xx.xx.234 xx.xx.xx.235 |</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>| 127 | telco1-pppoe-static | Tunnel-Server-Endpoint | += | :1:xx.xx.xx.170 </span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>| 128 | telco1-pppoe-static | Tunnel-Preference | += | :3:10 </span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>| 129 | telco1-pppoe-static | Tunnel-Type | += | :3:L2TP </span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>| 130 | telco1-pppoe-static | Tunnel-Medium-Type | += | :3:IP </span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>| 131 | telco1-pppoe-static | Tunnel-Password | += | :3:xxx.XXTxxx </span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>---------------------------+</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>19 rows in set (0.00 sec)</span></i><o:p></o:p></p><p><i><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#7030A0'>mysql></span></i><o:p></o:p></p></div></body></html>