<html><head><title>Re: [c-nsp] How to show ADSL customers two different GW!</title>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</head>
<body>
<span style=" font-family:'default'; font-size: 9pt;">Hi Jon,<br>
<br>
Few question:<br>
<br>
1. Did i understand right? I will set VRF to customer via Radius attribute but not via Cisco. I just need create this VRF's on Cisco?<br>
2. Can you please show me few examples for VRF ?<br>
3. Which attribute i should set ? give me link please where i can read more about this.<br>
<br>
Yes, i understand about routing on the core side, I always use one subnet for this, now need this "two groups", and i just add one more to same interface, sure i will route from core needed ips to another VLAN / 7204 IP.<br>
<br>
Thanks for your time.<br>
<br>
<br>
</span><table>
<tr>
<td width=2 bgcolor= #0000ff><br>
</td>
<td width=1464><span style=" font-family:'default'; font-size: 9pt;">Hi<br>
Just quickly looking at it, you want to also show a different ip on the next hop router (#2):<br>
1. x.x.x.2 < - 7204<br>
2. x.x.x.1 < - core router<br>
3. n.n.n.n < - my upstream<br>
<br>
In order to do that, you will probably have to:<br>
- set link 7204 <-> core to be trunk, with 2 different vlans (1 for group1, 2 for group2)<br>
- set 2 VRFs that match the 2 vlans.<br>
- set radius attribute to drop the customers into each vrf.<br>
<br>
Don't forget to change your routing on the core side - the x's and the y's will be routed differently now..<br>
<br>
<br>
Hope this helps<br>
<br>
<br>
<br>
On 16 September 2010 07:28, Sheremet Roman <<a href="mailto:romka@kharkov.org.ua">romka@kharkov.org.ua</a>> wrote:<br>
Hello,<br>
<br>
(From start.... Sorry for my english guys....)<br>
<br>
I have cisco 7204, l2tp customers, which auth via radius server.<br>
<br>
So i have Uplink to my CORE router from 7204 with next subnets:<br>
x.x.x.0/30<br>
y.y.y.0/30<br>
<br>
So, in one physical interface i have two subnets /30 for link (core -<br>
x.x.x.1, 7204 - x.x.x.2 ; same with y.y.y.0/30 subnets)<br>
<br>
When my DSL customers do traceroute <anyhost> they get next route:<br>
<br>
1. x.x.x.2 < - 7204<br>
2. x.x.x.1 < - core router<br>
3. n.n.n.n < - my upstream<br>
<br>
I want next, i want devide my customers to two groups depend on IP<br>
ranges, Group1 & Group2 (for example) then i want show to Group1 only<br>
x.x.x.0/30 route and y.y.y.0/30 route for Group2.<br>
<br>
So , when customer from group2 do trace they should see only<br>
y.y.y.0/30 hops....<br>
<br>
<br>
So my guys tell me use VRF for this, i have this option in my 7204 but<br>
i not sure if i can use VRF if i have only one in and one out<br>
interface in my 7204. I want show two different gateways via one<br>
physical link and one physical router.... But its should be hard<br>
separate... customers from Group1 never will see Group2 hops...<br>
<br>
<br>
When my customers connect they get IP (/32) from pool (from<br>
radius). Clients on DSL have next settings:<br>
ip: g.g.g.g/32<br>
gw: g.g.g.g <- Same AS IP!<br>
mask: 255.255.255.255<br>
<br>
<br>
<br>
Interface going to my Core router from 7204:<br>
<br>
interface GigabitEthernet0/1<br>
description "DSL UPLINK"<br>
ip address y.y.y.2 255.255.255.252 secondary<br>
ip address x.x.x.2 255.255.255.252<br>
load-interval 60<br>
duplex full<br>
speed 1000<br>
media-type rj45<br>
no negotiation auto<br>
<br>
Interface where i get clients from DSL peer:<br>
<br>
interface GigabitEthernet0/2<br>
description "DSL PEER"<br>
no ip address<br>
load-interval 60<br>
duplex full<br>
speed 1000<br>
media-type rj45<br>
no negotiation auto<br>
<br>
interface GigabitEthernet0/2.1017<br>
encapsulation dot1Q 1017<br>
ip address v.v.v.v 255.255.255.248<br>
no snmp trap link-status<br>
<br>
<br>
And my VPDN settings:<br>
<br>
vpdn-template <a href="http://xxxxx.com/">xxxxx.com</a><br>
description "<a href="http://xxxxx.com/">xxxxx.com</a> Cuscometrs"<br>
local name <a href="http://xxxxx.com/">xxxxx.com</a><br>
l2tp tunnel password x xxxxxxxxxxxxxxxxx<br>
!<br>
<br>
vpdn-group l2tp-1017<br>
! Default L2TP VPDN group<br>
accept-dialin<br>
protocol l2tp<br>
virtual-template 1<br>
lcp renegotiation always<br>
source vpdn-template <a href="http://xxxxx.com/">xxxxx.com</a><br>
!<br>
<br>
interface Virtual-Template1<br>
ip unnumbered GigabitEthernet0/1<br>
ip mtu 1460<br>
ip tcp header-compression<br>
ip tcp adjust-mss 1420<br>
load-interval 60<br>
no peer default ip address<br>
keepalive 30<br>
ppp mru match<br>
ppp authentication pap chap <a href="http://xxxxx.com/">xxxxx.com</a><br>
ppp authorization <a href="http://xxxxx.com/">xxxxx.com</a><br>
ppp accounting <a href="http://xxxxx.com/">xxxxx.com</a><br>
ppp multilink<br>
ppp multilink links maximum 4<br>
ppp multilink links minimum 2<br>
ppp multilink interleave<br>
<br>
<br>
So, if anyone know how to use VRF in my situation its will be very<br>
helpful for me.<br>
<br>
----------------<br>
>sh ip route g.g.g.g < Customer IP<br>
Routing entry for g.g.g.g/32<br>
Known via "connected", distance 0, metric 0 (connected, via interface)<br>
Routing Descriptor Blocks:<br>
* directly connected, via Virtual-Access50<br>
Route metric is 0, traffic share count is 1<br>
<br>
>sh int vi50<br>
Virtual-Access50 is up, line protocol is up<br>
Hardware is Virtual Access interface<br>
Interface is unnumbered. Using address of GigabitEthernet0/1 (x.x.x.2)<br>
MTU 1500 bytes, BW 1000000 Kbit, DLY 100000 usec,<br>
reliability 255/255, txload 1/255, rxload 1/255<br>
Encapsulation PPP, LCP Open, multilink Closed<br>
Open: IPCP<br>
PPPoVPDN vaccess, cloned from AAA, Virtual-Template1<br>
Vaccess status 0x44<br>
Protocol l2tp, tunnel id 46297, session id 25230, loopback not set<br>
Keepalive set (30 sec)<br>
DTR is pulsed for 5 seconds on reset<br>
Last input 00:00:10, output never, output hang never<br>
Last clearing of "show interface" counters 22:49:15<br>
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0<br>
Queueing strategy: fifo<br>
Output queue: 0/40 (size/max)<br>
1 minute input rate 0 bits/sec, 0 packets/sec<br>
1 minute output rate 0 bits/sec, 0 packets/sec<br>
17199 packets input, 1144344 bytes, 0 no buffer<br>
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles<br>
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort<br>
13192 packets output, 1366607 bytes, 0 underruns<br>
0 output errors, 0 collisions, 0 interface resets<br>
0 output buffer failures, 0 output buffers swapped out<br>
0 carrier transitions<br>
----------------<br>
<br>
<br>
If need more info from me i can take all ;)<br>
<br>
With Best Regards,<br>
<br>
<br>
_______________________________________________<br>
cisco-nsp mailing list <a href="mailto:cisco-nsp@puck.nether.net">cisco-nsp@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-nsp">https://puck.nether.net/mailman/listinfo/cisco-nsp</a><br>
archive at <a href="http://puck.nether.net/pipermail/cisco-nsp/">http://puck.nether.net/pipermail/cisco-nsp/</a></td>
</tr>
</table>
<br><br>
<br>
<br>
<span style=" font-family:'arial'; color: #c0c0c0;"><i>-- <br>
С уважением,<br>
Sheremet <a style=" font-style: normal;" href="mailto:romka@kharkov.org.ua">mailto:romka@kharkov.org.ua</a></body>