Hi David, I have static & dynamic pool's in MySQL database, so, i have no pool configured on cisco... Customers get random ip from free ips from sql.
I'm use radreply for static and radippool for dynamic ips. Ips - in SQL, VRF - on Cisco, i`m not sure how to configure this ips to VRF :( Regards, > On 17/09/2010 06:36, "Sheremet Roman" <[email protected]> wrote: >> Hi David, >> >> I think your config will be very helpful for me, big thanks for this, >> but i look your config and seems i see one more problem in my case.. >> >> Look, i have no VRF setuped now... just thinking, i have no problem to >> send attribute to static customers, i just add to rad_reply table >> needed attribute and then add VRF on the cisco... But how i should do >> same with DYNAMIC ip pool? I don't know which IP gustomer get in next >> connect, so i don't know which VRF should be used for this customer. >> > You use a dynamic ip pool, you can even re-use the same pool amongst > multiple vrfs , see > http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/se > c_per_vrf_aaa.html >> >> Also, you show me VRF which export/import from BGP AS as i see, how i >> can set ips for VRF which should be matched i dont want export/import >> from BGP... I have no neighbors for this. > Ok, there is no need to have the bgp portion of this configuration in such > case > Dave. >> >> Regards, >> >>> Heath Jones wrote: >>>> Yes, you need to assign from radius, but have the vrf's existing on the >>>> cisco (it must know to map vrf 10 to vlan 10 on the interface to the core >>>> router). >>>> >>>> The cisco documentation is here, there are some examples down the bottom. >>>> http://www.ciscosystems.com/en/US/docs/ios/12_2t/12_2t13/feature/guide/ftvrf >>>> aaa.html >>>> It's been a long time since I have done any of this, otherwise I would give >>>> you a snippet of a working config.. Hope this helps though! >>>> >> >>> f...@realm1 Auth-Type:= Local, User-Password == "bar" >>> Service-Type = Framed-User, >>> Framed-IP-Address = 192.168.243.2, >>> Framed-Netmask = 255.255.255.255, >>> Framed-Protocol = PPP, >>> Cisco-AVPair = "lcp:interface-config=ip vrf forwarding VPNA\nip >>> unnumbered loop0", >> >>> f...@realm2 Auth-Type:= Local, User-Password == "bar" >>> Service-Type = Framed-User, >>> Framed-IP-Address = 192.168.244.2, >>> Framed-Netmask = 255.255.255.255, >>> Framed-Protocol = PPP, >>> Cisco-AVPair = "lcp:interface-config=ip vrf forwarding VPNB\nip >>> unnumbered loop0", >> >> >>> ip vrf VPNA >>> description VPNA >>> rd 1:1 >>> vpn id 1:1 >>> route-target both 1:1 >>> ! >>> ip vrf VPNB >>> description VPNB >>> rd 1:2 >>> vpn id 1:2 >>> route-target both 1:2 >>> ! >>> router bgp 1 >>> ! >>> address-family ipv4 vrf VPNA >>> redistribute connected >>> redistribute static >>> no auto-summary >>> no synchronization >>> exit-address-family >>> ! >>> address-family ipv4 vrf VPNB >>> redistribute connected >>> redistribute static >>> no auto-summary >>> no synchronization >>> exit-address-family >>> end >>> ! >> >>> interface GigabitEthernet1/0.100 >>> desc VPNA uplink >>> encapsulation dot1q 100 >>> ip address 10.0.0.1 255.255.255.252 >>> ! >>> interface GigabitEthernet1/0.200 >>> desc VPNB uplink >>> encapsulation dot1q 200 >>> ip address 172.16.10.1 255.255.255.252 >>> ! >> >>> ip route VPNA 0.0.0.0 0.0.0.0 10.0.0.2 >>> ip route VPNB 0.0.0.0 0.0.0.0 172.16.10.2 >> >> >> >>> _______________________________________________ >>> cisco-nsp mailing list [email protected] >>> https://puck.nether.net/mailman/listinfo/cisco-nsp >>> archive at http://puck.nether.net/pipermail/cisco-nsp/ >> >> >> -- С уважением, Sheremet mailto:[email protected] _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
