From: David Goldsmith (dgoldsmi@xxxxxxxxx)
Date: Thu Jul 13 2000 - 17:39:10 GMT-3
Robert,
Can you send part of the configs... Hard to tell with info provided..
Dave G.
Robert LaGrasse wrote:
I'll try to keep this as short as possible. I know I'm missing
something stupid here. If you think you can field this, I'll send
you the complete configs and the visio drawing. I didn't want to
flood the list as some might have slow connections. I have two
AS5200's and a 4700 sitting together in an MMP bundle. The 4700
acts as the offload server, terminating all calls, handing out
addresses and authenticating users via CiscoSecureACS. I have a
2600 with an ISDN interface that can dial into the stack group, get
an address and authenticate and authorize quite happily. The
trouble comes in when I try to get VPDN to work. I connect a home
gateway via back to back serial to the 4700 offload server. The
4700 gets setup for VPDN action with the "vpdn enable" global
command. All authentication and authorization are still being
handled by the ACS box (standard AAA tacacs junk). The home gateway
is setup with the vpdn enable global command and a vpdn incoming
command pointing to the stack group and virtual template 1. The
template is setup for ppp encap, chap authentication using local
database, and peer ip addressing defined by a local pool. When I
setup the remote router to dialin (changing the local hostname and
username database on the same remote router that worked before), I
get the PPP connection to go to the stack. I don't get the stack to
forward the L2F connection to the home gateway router. "show vpdn"
on the 5200 and the offload server show the L2F connection between
the boxes in the stack group, but not a connection to the home
gateway. I debugged vpdn events on the home gateway. I get nothing,
so I don't think the requests are being sent. I've never setup ACS
to make VPDN happen before, so this might be the problem. Is it
even possible? I guess I'm rambling at this point. Sorry for the
stream of consciousness stuff, folks :) If you've done this before
I've got the configs for a sanity check. Thanks!-B
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:23:53 GMT-3