<HTML>
<HEAD>
<TITLE>Re: [rbak-nsp] Cisco AS5300 L2TP forwarding to Redback SmartEdge</TITLE>
</HEAD>
<BODY>
<FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Hi Carl,<BR>
<BR>
Looking through the more interesting part of your output:<BR>
<BR>
<snip><BR>
</SPAN></FONT><FONT COLOR="#000080"><FONT SIZE="2"><FONT FACE="Arial"><SPAN STYLE='font-size:10pt'>Mar 12 15:02:20: [255/16:1023:63/5/2/1]: %AAA-7-EXCEPT: aaa_idx 10000002: Cannot bind subscriber <user>@zen.net.uk to valid context<BR>
Mar 12 15:02:20: [255/16:1023:63/5/2/1]: %AAA-3-ERR: aaa_idx 10000002: Can't find pvd_idx ffffffff<BR>
Mar 12 15:02:20: [255/16:1023:63/5/2/1]: %AAA-7-EXCEPT: aaa_idx 10000002: aaa_remove_session_from_trees: remove session that is not bound to any context yet<BR>
</SPAN></FONT></FONT></FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'></snip><BR>
<BR>
It looks like the zen.net.uk can’t be found as a valid context.<BR>
You can solve this by adding a domain to the context like:<BR>
!<BR>
context zen<BR>
domain zen.net.uk<BR>
!<BR>
Or that you would like Radius to sort this out for you, but then you still need to get the subscriber forwarder to the radius server.<BR>
Add the following statements:<BR>
!<BR>
aaa global authentication subscriber radius context local<BR>
aaa last-resort context lastresort <BR>
!<BR>
context local<BR>
!<BR>
interface mgmt<BR>
ip address 172.16.10.51/24<BR>
!<BR>
radius server 172.16.10.10 encrypted-key BF4F4B13CDD80C61 oldports<BR>
!<BR>
!<BR>
context lastresort<BR>
! <BR>
aaa authentication subscriber global <BR>
!<BR>
! ** End Context **<BR>
<BR>
This will help to guide subscriber with unknown domains to be guided to the global authentication method. <BR>
It will be directed to lastresort first, at which it would be re-directed to the global authentication, which points to the radius server at the local context.<BR>
(If you can still follow this detour... This strange authentication method is introduced by the SmartEdge, former SMS platform had a simple direction for global or local authentication ;-)<BR>
<BR>
I hope you will be able to find your problem, so far this looks the best I can advice.<BR>
<BR>
Kind regards,<BR>
<BR>
Frans.<BR>
</SPAN></FONT>
</BODY>
</HTML>