<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:10px"><div dir="ltr" id="yui_3_16_0_1_1417697048450_22756"><span>Hi James,</span></div><div dir="ltr" id="yui_3_16_0_1_1417697048450_22756"><span><br></span></div><div dir="ltr" id="yui_3_16_0_1_1417697048450_22756"><span>There is an example here:</span></div><div dir="ltr" id="yui_3_16_0_1_1417697048450_22756"><span id="yui_3_16_0_1_1417697048450_22796"><a href="http://www.cisco.com/c/en/us/support/docs/security-vpn/remote-authentication-dial-user-service-radius/4675-vpdn-rad.html" id="yui_3_16_0_1_1417697048450_22795">http://www.cisco.com/c/en/us/support/docs/security-vpn/remote-authentication-dial-user-service-radius/4675-vpdn-rad.html</a><br></span></div><div dir="ltr" id="yui_3_16_0_1_1417697048450_22756"><br></div><div dir="ltr" id="yui_3_16_0_1_1417697048450_22756">which shows the LAC, LNS & RADIUS configs required. In this example they have two local (terminated on LAC) users and one that is handed off to another LNS.</div><div dir="ltr" id="yui_3_16_0_1_1417697048450_22756"><br></div><div dir="ltr" id="yui_3_16_0_1_1417697048450_22756">Hopefully you should be able to extrapolate it to what you need.</div><div dir="ltr" id="yui_3_16_0_1_1417697048450_22756"><br></div><div dir="ltr" id="yui_3_16_0_1_1417697048450_22756"><br></div><div dir="ltr" id="yui_3_16_0_1_1417697048450_22756">regards,</div><div dir="ltr" id="yui_3_16_0_1_1417697048450_22756">Tony.</div><br> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 10px;" id="yui_3_16_0_1_1417697048450_22753"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif; font-size: 12px;" id="yui_3_16_0_1_1417697048450_22752"> <div dir="ltr" id="yui_3_16_0_1_1417697048450_22755"> <hr size="1" id="yui_3_16_0_1_1417697048450_23101"> <font size="2" face="Arial" id="yui_3_16_0_1_1417697048450_22754"> <b><span style="font-weight:bold;">From:</span></b> James Bensley <jwbensley@gmail.com><br> <b><span style="font-weight: bold;">To:</span></b> cisco-bba@puck.nether.net <br> <b><span style="font-weight: bold;">Sent:</span></b> Friday, 5 December 2014, 3:12<br> <b><span style="font-weight: bold;">Subject:</span></b> [cisco-bba] Cisco as LAC<br> </font> </div> <div class="y_msg_container" id="yui_3_16_0_1_1417697048450_22751"><br>Hi All,<br><br>I posted this to the Cisco NSP list but I should try here too!<br><br>We take wholesale ADSL from multiple provides but also are an LLU<br>provider with on-net ADSL.<br><br>I'm trying to configure up an LAC in our lab but not getting anywhere...<br><br>I have seen an old post here where a guy wants to set up an LAC but<br>its pretty strait forward, just forwarding tunnels on to an LNS:<br><a href="http://www.gossamer-threads.com/lists/cisco/bba/82134" target="_blank" id="yui_3_16_0_1_1417697048450_22798">http://www.gossamer-threads.com/lists/cisco/bba/82134</a><br><br>I am trying in the lab to create a LAC config that will query our<br>RADIUS for PPP authentication because the RADIUS will return different<br>tunnel end points based on the user authenticating in.<br><br>With the RADIUS responses to our wholesale providers<br><a ymailto="mailto:user@customer1.net" href="mailto:user@customer1.net">user@customer1.net</a> will prefer LNS1 and <a ymailto="mailto:user@customer2.net" href="mailto:user@customer2.net">user@customer2.net</a> will prefer<br>LNS2. I wish to re-create this internally. All config examples and<br>guides I can find on the internet are for creating static VPDN groups<br>that initiate a tunnel to 1.2.3.4 for uses that mactch domain<br>customer1.net. I would have to create a VPDN group for every domain.<br><br>Does Cisco IOS not support more typical wholesale LAC features<br>operting on the output of RADIUS and also supporting the concept of<br>query RADIUS IP 1.1.1.1 for all @domain1.net user and query RADIUS<br>2.2.2.2 for all @domain2.net user queries?<br><br>I am labbing this with 7200 series routers running<br>c7200-advipservicesk9-mz.152-4.M7.bin. We also have ASRs but I was<br>hoping to stick to these very well known platforms first then try the<br>ASRs.<br><br>Cheers,<br>James.<br>_______________________________________________<br>cisco-bba mailing list<br><a ymailto="mailto:cisco-bba@puck.nether.net" href="mailto:cisco-bba@puck.nether.net">cisco-bba@puck.nether.net</a><br><a href="https://puck.nether.net/mailman/listinfo/cisco-bba" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-bba</a><br><br><br></div> </div> </div> </div></body></html>