Well, are you not running a routing protocol such that these per-user statics are injected correctly?
On 19/09/2010 09:18, "Sheremet Roman" <[email protected]> wrote: > Hi David, > > I have static & dynamic pool's in MySQL database, so, i have no pool > configured on cisco... Customers get random ip from free ips from sql. > > I'm use radreply for static and radippool for dynamic ips. Ips - in > SQL, VRF - on Cisco, i`m not sure how to configure this ips to VRF :( > > > Regards, > >> On 17/09/2010 06:36, "Sheremet Roman" <[email protected]> wrote: > >>> Hi David, >>> >>> I think your config will be very helpful for me, big thanks for this, >>> but i look your config and seems i see one more problem in my case.. >>> >>> Look, i have no VRF setuped now... just thinking, i have no problem to >>> send attribute to static customers, i just add to rad_reply table >>> needed attribute and then add VRF on the cisco... But how i should do >>> same with DYNAMIC ip pool? I don't know which IP gustomer get in next >>> connect, so i don't know which VRF should be used for this customer. >>> >> You use a dynamic ip pool, you can even re-use the same pool amongst >> multiple vrfs , see >> http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/se >> c_per_vrf_aaa.html > > >>> >>> Also, you show me VRF which export/import from BGP AS as i see, how i >>> can set ips for VRF which should be matched i dont want export/import >>> from BGP... I have no neighbors for this. > >> Ok, there is no need to have the bgp portion of this configuration in such >> case > >> Dave. > > >>> >>> Regards, >>> >>>> Heath Jones wrote: >>>>> Yes, you need to assign from radius, but have the vrf's existing on the >>>>> cisco (it must know to map vrf 10 to vlan 10 on the interface to the core >>>>> router). >>>>> >>>>> The cisco documentation is here, there are some examples down the bottom. >>>>> http://www.ciscosystems.com/en/US/docs/ios/12_2t/12_2t13/feature/guide/ftv >>>>> rf >>>>> aaa.html >>>>> It's been a long time since I have done any of this, otherwise I would >>>>> give >>>>> you a snippet of a working config.. Hope this helps though! >>>>> >>> >>>> f...@realm1 Auth-Type:= Local, User-Password == "bar" >>>> Service-Type = Framed-User, >>>> Framed-IP-Address = 192.168.243.2, >>>> Framed-Netmask = 255.255.255.255, >>>> Framed-Protocol = PPP, >>>> Cisco-AVPair = "lcp:interface-config=ip vrf forwarding VPNA\nip >>>> unnumbered loop0", >>> >>>> f...@realm2 Auth-Type:= Local, User-Password == "bar" >>>> Service-Type = Framed-User, >>>> Framed-IP-Address = 192.168.244.2, >>>> Framed-Netmask = 255.255.255.255, >>>> Framed-Protocol = PPP, >>>> Cisco-AVPair = "lcp:interface-config=ip vrf forwarding VPNB\nip >>>> unnumbered loop0", >>> >>> >>>> ip vrf VPNA >>>> description VPNA >>>> rd 1:1 >>>> vpn id 1:1 >>>> route-target both 1:1 >>>> ! >>>> ip vrf VPNB >>>> description VPNB >>>> rd 1:2 >>>> vpn id 1:2 >>>> route-target both 1:2 >>>> ! >>>> router bgp 1 >>>> ! >>>> address-family ipv4 vrf VPNA >>>> redistribute connected >>>> redistribute static >>>> no auto-summary >>>> no synchronization >>>> exit-address-family >>>> ! >>>> address-family ipv4 vrf VPNB >>>> redistribute connected >>>> redistribute static >>>> no auto-summary >>>> no synchronization >>>> exit-address-family >>>> end >>>> ! >>> >>>> interface GigabitEthernet1/0.100 >>>> desc VPNA uplink >>>> encapsulation dot1q 100 >>>> ip address 10.0.0.1 255.255.255.252 >>>> ! >>>> interface GigabitEthernet1/0.200 >>>> desc VPNB uplink >>>> encapsulation dot1q 200 >>>> ip address 172.16.10.1 255.255.255.252 >>>> ! >>> >>>> ip route VPNA 0.0.0.0 0.0.0.0 10.0.0.2 >>>> ip route VPNB 0.0.0.0 0.0.0.0 172.16.10.2 >>> >>> >>> >>>> _______________________________________________ >>>> cisco-nsp mailing list [email protected] >>>> https://puck.nether.net/mailman/listinfo/cisco-nsp >>>> archive at http://puck.nether.net/pipermail/cisco-nsp/ >>> >>> >>> > > > -- David Freedman Group Network Engineering [email protected] Tel +44 (0) 20 7685 8000 Claranet Group 21 Southampton Row London - WC1B 5HA - UK http://www.claranet.com Company Registration: 3152737 - Place of registration: England All the information contained within this electronic message from Claranet Ltd is covered by the disclaimer at http://www.claranet.co.uk/disclaimer _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
