Hi Misha,<br>Does your radius server send the context name ("BRAS") as an attribute to the redback in the access accept? If the answer is no, this is probably the issue. The redback router does not know that the dynamic clips subscriber should be bound to an interface in context BRAS. This is because the AAA username in dynamic clips is is the end client MAC address (no domain). <br>
<br>thanks<br>sridhar<br><br><div class="gmail_quote">On Wed, Aug 11, 2010 at 12:14 PM, <span dir="ltr"><<a href="mailto:misha@iim.pl">misha@iim.pl</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<br>
I'm beginner user of redback routers. From about 2 weeks I try to create<br>
simply configuration but I still have problems.<br>
<br>
I want to create BRAS context with internal dhcp serwer and GLOBAL radius<br>
authentication (radius client in context local).<br>
<br>
In the global section:<br>
aaa global authentication radius context local<br>
<br>
in the context BRAS:<br>
aaa authentication subscriber radius global<br>
dhcp policy...<br>
<br>
in context local:<br>
radius server 192.168... key flksjdkfjsdkf<br>
<br>
All the configuration below... this configuration does'nt works, dynamic<br>
clips are not created<br>
BUT:<br>
1. communication with radius works fine (in the radius logs i see ACCEPTED);<br>
2. Whet I turn off authentication in context BRAS (aaa authentication<br>
subscriber none) - it works - so DHCP iS working<br>
3. When I move the radius to the context BRAS (without global<br>
authenticaation) -works! - so radius is working<br>
<br>
MK<br>
<br>
<br>
Current configuration:<br>
!<br>
! Configuration last changed by user 'misha' at Mon Aug 9 10:52:45 2010<br>
!<br>
!<br>
!<br>
!<br>
!<br>
aaa global authentication subscriber radius context local<br>
!<br>
!<br>
service multiple-contexts<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
<br>
<br>
!<br>
!<br>
!<br>
context local<br>
!<br>
ip domain-lookup<br>
!<br>
interface mgmt<br>
ip address <a href="http://192.168.2.9/24" target="_blank">192.168.2.9/24</a><br>
logging console<br>
!<br>
aaa authentication administrator local<br>
!<br>
administrator leon encrypted 1 $1$........$5oNrzEf/HtcRZcaSZEVQa0<br>
privilege start 15<br>
privilege max 15<br>
administrator misha encrypted 1 $1$........$t8SQPi4ZT/TyNvolUGhOv1<br>
privilege start 10<br>
privilege max 15<br>
!<br>
radius server 192.168.2.8 encrypted-key 64DAB7650584FA7D452BD158B882C838<br>
!<br>
ip route <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> 192.168.2.254<br>
service ssh server<br>
!<br>
<br>
<br>
!<br>
context BRAS<br>
!<br>
description routing_context<br>
!<br>
no ip domain-lookup<br>
!<br>
interface LAN multibind<br>
description BRAS LAN GW<br>
ip address <a href="http://83.142.199.193/26" target="_blank">83.142.199.193/26</a><br>
dhcp server interface<br>
ip arp proxy-arp<br>
!<br>
interface WAN<br>
ip address <a href="http://83.142.192.100/29" target="_blank">83.142.192.100/29</a><br>
no logging console<br>
!<br>
aaa authentication administrator local<br>
aaa authentication administrator maximum sessions 1<br>
aaa authentication subscriber radius global<br>
!<br>
!<br>
subscriber default<br>
dhcp max-addrs 1<br>
!<br>
subscriber name 00:1F:F3:5B:67:40<br>
!<br>
ip route <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> 83.142.192.102<br>
no service ssh server<br>
!<br>
dhcp server policy<br>
nak-on-subnet-deletion<br>
option domain-name <a href="http://mi.pl" target="_blank">mi.pl</a><br>
offer-lease-time 300<br>
default-lease-time 900<br>
maximum-lease-time 900<br>
subnet <a href="http://83.142.199.192/26" target="_blank">83.142.199.192/26</a><br>
range 83.142.199.210 83.142.199.250<br>
option domain-name-server 83.142.192.2<br>
<br>
<br>
!<br>
! ** End Context **<br>
logging tdm console<br>
logging active<br>
logging standby short<br>
!<br>
!<br>
!<br>
!Ethernet connectivity fault management configuration<br>
!<br>
!<br>
!<br>
port ethernet 1/1<br>
! XCRP management port on slot 1<br>
no shutdown<br>
bind interface mgmt local<br>
!<br>
card carrier 2<br>
!<br>
port ethernet 2/1<br>
no shutdown<br>
medium-type copper<br>
encapsulation dot1q<br>
dot1q pvc 2000 encapsulation multi<br>
bind interface WAN BRAS<br>
!<br>
port ethernet 2/2<br>
no shutdown<br>
medium-type copper<br>
encapsulation dot1q<br>
dot1q pvc 15 encapsulation multi<br>
service clips dhcp context BRAS<br>
!<br>
ssh server full-drop 10<br>
!<br>
ssh server rate-drop 50<br>
!<br>
ssh server start-drop 5<br>
!<br>
system hostname RedBack<br>
!<br>
no service console-break<br>
!<br>
service crash-dump-dram<br>
!<br>
no service auto-system-recovery<br>
!<br>
end<br>
[local]RedBack#<br>
<br>
<br>
_______________________________________________<br>
redback-nsp mailing list<br>
<a href="mailto:redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/redback-nsp" target="_blank">https://puck.nether.net/mailman/listinfo/redback-nsp</a><br>
</blockquote></div><br>