[cisco-nas] VPDN Problems

[Oliver Boehmer (oboehmer)]

> On Tue, Dec 09, 2003 at 10:25:51AM +1100, Nikolas Geyer wrote:
> > The setup works great, all ADSL customers terminate with us. But is
> > it possible to act as a "virtual LAC" of sorts, so depending on the
> > domain the customer is connecting from, our LNS then tunnels the
> > connection via L2TP to another LNS?
> 
> I'd be interested how this can be done controlled on a per-user basis,
> not per-domain.

use "vpdn authen-before-forward", and just pass the tunnel attributes in
the AAA profile. So just like the way authen-before-forward works on the
NAS/LAC, if IOS finds tunnel attributes, it forwards the session, if it
doesn't, it terminates the user locally.

	oli