<html><body><span style="font-family:Verdana; color:#000000; font-size:10pt;"><div>Router is a Cisco 7206VXR, with NPE-G2 running 12.4(4)XD5. It is deployed as an LNS terminating PPPOE sessions. Everything worked fine for years, but we needed to upgrade to 12.2(2x)T. After the upgrade:</div><div><br></div><div>1. Cisco (1841) endpoints doing bonded adsl seem to re-connect just fine</div><div>2. All other adsl endpoints seem to 'fail'. Radius authentication is always "OK", but the same accounts keeps requesting authentication every other 5 seconds, so the OK-ed authentication does not seem to be making it back to the pppoe client. Radius is getting hammered with authentication requests, and it is giving an "Auth OK" response, but the LNS keeps re-submitting the authentication requests.<br></div><div><br></div><div><br></div><div>For these failing users, a "show vpdn history failure" on LNS reveals the following entries:</div><div><br></div><div>----------------------------<br></div><div><i>"User: username@broadconnect.ca, MID = 76<br>NAS: ba-autr01, IP address = 91.56.40.227, CLID = 12441<br>Gateway: lns1-dsl, IP address = 192.168.50.242, CLID = 20365<br>Log time: *Oct 28 19:40:19.907, Error repeat count: 3<br>Failure type: Call disconnected for administrative reasons<br>Failure reason: Result 2, Error 6, admin-reset/VPDN Admin Disconnect"</i></div><div>----------------------------</div><div><br></div><div><br></div><div>BTW, the LNS is on a private network, because it is fronted by another box that forwards the L2TP sessions. Worked fine with the old firmware. Relevant Cisco config on LNS looks like this:</div><div><br></div><div><br></div><div>-----------</div><div>aaa authentication ppp telcoVPDN group telcaRADIUS<br>aaa authorization network telcoVPDN group telcaRADIUS<br>aaa authorization auth-proxy default group telcaRADIUS<br><br><br>vpdn enable<br>vpdn multihop<br>vpdn logging<br>vpdn logging user<br>vpdn logging tunnel-drop<br>vpdn history failure table-size 50<br>!<br>vpdn-group telca-ADSL<br>! Default L2TP VPDN group<br> accept-dialin<br> protocol l2tp<br> virtual-template 1<br> lcp renegotiation always<br> l2tp tunnel password 7 XXXXXXXXX<br> ip pmtu<br> ip mtu adjust<br><br><br><br>interface Virtual-Template1<br> description telca-ADSL-STATIC<br> mtu 1492<br> ip unnumbered GigabitEthernet0/1.104<br> ip verify unicast reverse-path<br> no ip redirects<br> no ip proxy-arp<br> ip tcp adjust-mss 1420<br> no logging event link-status<br> no peer default ip address<br> ppp mtu adaptive<br> ppp authentication pap telcoVPDN<br> ppp authorization telcoVPDN<br> ppp accounting telcoVPDN<br> ppp chap refuse<br> ppp ipcp dns x.x.x.x x.x.x.x<br> ppp multilink</div><div>-----------------------</div><div><br></div><div><br></div><div>Any ideas?</div><div>Dominic<br></div></span></body></html>