[c-nsp] PPP MTU and RADIUS

Robert Collier rob at ossifrage.net
Wed Jul 5 11:49:36 EDT 2006


I'm tearing my hair out trying to get the Framed-MTU radius attribute to work.

I have a 7206vxr npe-g1 acting as an LNS, and I want to set the MTU on
a per user basis. I include the 'Framed-MTU = 1492' attribute/value
pair in my radius response but the MTU stays at 1500 unless I
explicitly set a different MTU on the virtual template.

Have I missed a small but significant bit of configuration?

aaa authentication ppp default group radius
aaa authorization template
aaa authorization network default group radius
!
vpdn enable
vpdn multihop
vpdn logging
vpdn logging local
vpdn logging remote
vpdn logging user
vpdn logging tunnel-drop
vpdn authorize domain
vpdn domain-delimiter - suffix
!
vpdn-group fromer0
 accept-dialin
  protocol l2tp
  virtual-template 1
 terminate-from hostname er0.lhx
 lcp renegotiation always
 l2tp tunnel password 7 **************
!
interface Virtual-Template1
 no ip address
 ip verify unicast reverse-path
 ip nat inside
 ip virtual-reassembly
 keepalive 1
 ppp mtu adaptive proxy
 ppp mru match
 ppp authentication pap
 ppp multilink
 ppp timeout retry 1
!

-- 
Robert Collier
rob at ossifrage.net


More information about the cisco-nsp mailing list