R: R: Cisco VRF + Radius

2007-07-10 Thread Francesco Cristofori
You don't need to set up vrf templates if everyone is going to use the default radius server and default authentication and au6thorization groups. It's optional. Thanks Ivan, now it's clear I don't need templates... What does debug radius and debug ppp negotiation on Cisco say about why

R: Cisco VRF + Radius

2007-07-09 Thread Francesco Cristofori
Putting a User into a certain VRF is quite simple: vrfuser User-Password == topsecret Cisco-AVPair += lcp:interface-config#1=ip vrf forwarding \ VRFNAME, Thank you Gerald, this is what I need to do. I tried using this

R: Cisco VRF + Radius

2007-07-09 Thread Francesco Cristofori
Hi Kalik, thanks for your reply. I had a look at the cisco doc on vrf forwarding, but I think it's not what I need to do. I don't need to put all template items in fr, but only to select the vrf based on group which the user belongs to. Did I miss the point? Do I need to configure Templates

Re: R: Cisco VRF + Radius

2007-07-09 Thread tnt
You don't need to set up vrf templates if everyone is going to use the default radius server and default authentication and au6thorization groups. It's optional. What does debug radius and debug ppp negotiation on Cisco say about why was the Framed-IP-Address rejected. If it fails on IPCP then