Hey,
No you can reuse your virtual templates for all customers, vrf or internet. See
below config for BRAS and av-pairs required on AAA server.
You might not want to use DHCP for IP assignment and just use AAA as it will be
cleaner.
I also found that you will have more flexibility using aaa instead of defining
local ISG policies on the router.
ip dhcp pool DHCP_VRF_TEST
vrf xxxxxxxx
relay source xxx.xxx.2.161 255.255.255.224
class DHCP_VRF_TEST
relay target xxx.xxx.xxx.xxx (DHCP Server)
ip dhcp class DHCP_VRF_TEST
bba-group pppoe GROUP_1102
virtual-template 2
interface Loopback301
description xxxxx
ip vrf forwarding xxxxx
ip address xxx.xxx.2.161 255.255.255.255
interface GigabitEthernet0/0.1102
encapsulation dot1Q 1102 second-dot1q 10-500
pppoe enable group GROUP_1102
no cdp enable
ip subscriber l2-connected
initiator radius-proxy
!
interface Virtual-Template2
description xxxxxx
mtu 1472
ip unnumbered Loopback0
no ip redirects
no ip proxy-arp
ip flow ingress
ip tcp adjust-mss 1452
no logging event link-status
load-interval 30
peer default ip address dhcp
no snmp trap link-status
ppp lcp delay 3
ppp authentication pap chap
ppp direction callin
router bgp xxxx
address-family ipv4 vrf xxxxx
no synchronization
bgp router-id xxx.xxx.2.161
redistribute connected
exit-address-family
may need a route back for dhcp response
ip route xxx.xxx.2.161 255.255.255.255 Loopback301
MySQL config for freeradius
insert into radgroupreply values ('325', 'test-qos-7mb', 'Cisco-AVPair', '+=',
'ip:sub-qos-policy-in=qos-dsl-7mb-in-parent');
insert into radgroupreply values ('326', 'test-qos-7mb', 'Cisco-AVPair', '+=',
'ip:sub-qos-policy-out=qos-dsl-7mb-out-parent');
insert into radgroupreply values ('300', 'VRF-TEST-A', 'Service-Type', '=',
'Framed-User');
insert into radgroupreply values ('301', 'VRF-TEST-A', 'Framed-Protocol', '=',
'ppp');
insert into radgroupreply values ('302', 'VRF-TEST-A', 'Framed-Routing', '=',
'Broadcast-Listen');
insert into radgroupreply values ('303', 'VRF-TEST-A', 'Framed-MTU', '=',
'1500');
insert into radgroupreply values ('304', 'VRF-TEST-A', 'Framed-Compression',
'=', 'Van-Jacobson-TCP-IP');
insert into radgroupreply values ('305', 'VRF-TEST-A', 'Cisco-AVPair', '=',
'subscriber:classname=DHCP-VRF-TEST');
insert into radgroupreply values ('306', 'VRF-TEST-A', 'Cisco-AVPair', '+=',
'subscriber:accounting-list=FLOWACCT');
insert into radgroupreply values ('307', 'VRF-TEST-A', 'Cisco-AVPair', '+=',
'ip:vrf-id=XXXXX');
insert into radgroupreply values ('308', 'VRF-TEST-A', 'Cisco-AVPair', '+=',
'"ip:ip-unnumbered=loopback 301"');
insert into radgroupreply values ('310', 'VRF-TEST-A', 'Cisco-AVPair', '+=',
'subscriber:sg-service-type=primary');
insert into radgroupreply values ('311', 'VRF-TEST-A', 'Cisco-AVPair', '+=',
'subscriber:sg-service-group=TEST');
insert into usergroup values ('testuser, 'VRF-TEST-A', '1');
Anthony
-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of zaidoon h
Sent: 10 May 2011 10:38
To: [email protected]
Subject: [c-nsp] BRAS PPPOE vpn
Hi
I have BRAS 7201 and AAA server , I want to configure vpn for ADSL subscribers
through our core , how can implement this service and can pppoe session
terminated into vrf ? do i need to configure a new template interface for
every customer ?
anyone can help me in this issue
Regards
Zaid
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
