[c-nsp] 7206 Config Help - DSL Aggregration

[Paul Stewart]

Hi there...

They are vpdn sessions that showup... Yes 7200 terminates the PPP for
these users.  The tunnel switching is out front in our lt2p providers
network (Bell Nexxia).

The users are user at domain as you described and for each @domain I want
the ability to define their IP pool and radius servers.  In the Redback
world this was known as contexts and is quite easy to do....;)

Thanks,

Paul
 

-----Original Message-----
From: Arie Vayner (avayner) [mailto:avayner at cisco.com] 
Sent: Thursday, August 17, 2006 1:46 PM
To: Paul Stewart; Robert Blayzor
Cc: cisco-nsp at puck.nether.net
Subject: RE: [c-nsp] 7206 Config Help - DSL Aggregration

Paul,

Do you get the sessions as raw PPPoE or over L2TP (vpdn)?
Does your 7200 terminate the PPP, or do you perform tunnel switching for
it?
The end users are using user at domain1 and user at domain2, and you want
@domain1 to use radius1 and @domain2 to use radius2, right?

Arie
 

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Paul Stewart
Sent: Thursday, August 17, 2006 19:43 PM
To: Robert Blayzor
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] 7206 Config Help - DSL Aggregration

Thanks... Do you have any more information on "However, on later
versions of IOS if you were using PPPoE I think you can setup subscriber
profiles and services to do just that." ? :)

The end users are running PPPOE to this box...

Paul
 

-----Original Message-----
From: Robert Blayzor [mailto:rblayzor at inoc.net]
Sent: Thursday, August 17, 2006 12:39 PM
To: Paul Stewart
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] 7206 Config Help - DSL Aggregration

Paul Stewart wrote:
> Hi everyone...
> 
> We have a Cisco 7206VXR that we are doing DSL aggregation on
currently.
> Thanks to some help from a buddy of mine, I believe we have found a 
> way to use different radius servers dependant on their domain name at 
> login time.
> 
> Below is current config.  What I'd like to do is to have domain 
> abc.net added and use another radius server (that shouldn't be hard - 
> but the two listed below point to same radius server today)... My 
> biggest challenge is trying to define separate IP pools for each 
> domain name at login...
> 
> Any ideas?  The l2tp provider has talked about using a series of 
> loopback addresses on our side and have each domain point to a 
> different loopback....


If they are all coming on the same PVC and bound to the same
Virtual-Template, I don't think you can direct RADIUS requests to
another set of servers.  If they come on a separate PVC you can bind
them to another Virtual-Template to which uses another AAA group and
another set of RADIUS servers.  I don't think the router itself will
look at the RADIUS username attribute and direct it to another set of
RADIUS servers, that's what proxy RADIUS is for.

However, on later versions of IOS if you were using PPPoE I think you
can setup subscriber profiles and services to do just that.

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/