> Did I missed anything? Do you have the following config in the LNS?
aaa authorization network default group RADIUS1 aaa authorization subscriber-service default local And for the user in the Radius: Framed-IP-Address += x.x.x.x, Cisco-avpair += "ip:vrf-id=VRF-C", Cisco-avpair += "ip:ip-unnumbered=loopback101" If so, try using PAP auth. Regards. ________________________________ From: ar <ar_...@yahoo.com> To: cisco-nsp <cisco-nsp@puck.nether.net> Sent: Saturday, June 16, 2012 10:53 PM Subject: [c-nsp] Fw: LNS Error %VPDN-3-NORESOURCE: Attached is the complete debug output. Below is the config. There's one vrf configured. And I am attaching the l2tp client to this vrf. Since global l2tp (no vrf) was able to authenticate, can this be a possible IOS issue? vpdn-group 1 description accept-dialin protocol l2tp virtual-template 1 terminate-from hostname XXX source-ip x.x.x.x local name LNS1 lcp renegotiation on-mismatch l2tp tunnel password 7 02081B3C22517C54 l2tp tunnel timeout no-session 600 ip tos reflect interface Virtual-Template1 mtu 1462 ip unnumbered Loopback0 ip tcp adjust-mss 1422 no peer default ip address keepalive 60 ppp authentication chap NEW end aaa group server radius RADIUS1 server-private x.x.x.xauth-port 1812 acct-port 1813 key 7 123456781C aaa authentication ppp NEW group RADIUS1 ! interface Loopback101 ip vrf forwarding VRF-C ip address 10.16.1.101 255.255.255.255 ip vrf VRF-C rd 100:109 route-target export 100:109 route-target import 100:109 _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/