> Did I missed anything?

Do you have the following config in the LNS?

aaa authorization network default group RADIUS1
aaa authorization subscriber-service default local

And for the user in the Radius:

  Framed-IP-Address += x.x.x.x,
  Cisco-avpair += "ip:vrf-id=VRF-C",
  Cisco-avpair += "ip:ip-unnumbered=loopback101"

If so, try using PAP auth.

Regards.

________________________________
 From: ar <ar_...@yahoo.com>
To: cisco-nsp <cisco-nsp@puck.nether.net> 
Sent: Saturday, June 16, 2012 10:53 PM
Subject: [c-nsp] Fw:  LNS Error %VPDN-3-NORESOURCE:
 




Attached is the complete debug output.

Below is the config.
There's one vrf configured.
And I am attaching the l2tp client to this vrf.

Since global l2tp (no vrf) was able to authenticate, can this be a possible IOS 
issue?

vpdn-group 1
 description 
 accept-dialin
  protocol l2tp
  virtual-template 1
 terminate-from hostname XXX
 source-ip x.x.x.x
 local name LNS1
 lcp renegotiation on-mismatch
 l2tp tunnel password 7 02081B3C22517C54
 l2tp tunnel timeout no-session 600
 ip tos
reflect


interface Virtual-Template1
 mtu 1462
 ip unnumbered Loopback0
 ip tcp adjust-mss 1422
 no peer default ip address
 keepalive 60
 ppp authentication chap NEW

end



aaa group server radius RADIUS1
 server-private x.x.x.xauth-port 1812 acct-port 1813 key 7 123456781C

aaa authentication ppp NEW group RADIUS1


!
interface Loopback101
 ip vrf forwarding VRF-C
 ip address 10.16.1.101 255.255.255.255

ip vrf VRF-C
 rd 100:109
 route-target export 100:109
 route-target import 100:109





_______________________________________________
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to