Mailing List Archive

avpair for virtual template
Hi all,

Somebody knows if exist a cisco-avpair for virtual templates?

I have a lot of PPPoE sessions inbound my router for the same interface

interface FastEthernet0/0
ip address 192.168.113.1 255.255.255.0
duplex auto
speed auto
pppoe enable group adslpersonal
!
bba-group pppoe adslpersonal
virtual-template 13
sessions per-mac limit 1
!

With this solution I only can config one virtual-template for all users, but I would like set one per user or per user-group via RADIUS.
ideas?

And, are there a list of cisco-avpair commands?

Thanks in advance.

Regards.

David.





David Su?rez Rubio
SISTEMAS DE COMUNICACI?N

[cid:imagebc5db6.gif@ad4a03f3.fe514cf0]
[cid:imageae6c59.gif@7a78cdeb.fbf94d18] Avda. Club Deportivo, 55
26007 Logro?o (La Rioja)
T. 902 44 90 90 F. 941 51 93 92
www.knet.es<http://www.knet.es/>

Pol?tica de privacidad<http://www.knet.es/mail/politica_privacidad.htm>
Re: avpair for virtual template [ In reply to ]
Hi David,

I'm not sure if there is a RADIUS attribute for virtual-template, someone else may be able to provide you with a definite answer.

As an alternative you could create a template that has all of the standard stuff in it and then groups/users to add anything you need for each connection. Using groups makes this easier to manage.

As an example we do the following:

1. default group - all users are a part of it, specifies things that every connection needs like "framed-protocol=PPP", etc.
2. group per VPN - has the VRF the connection will be part of and the loopback address that it will be associated with (each VRF has it's own loopback that is different)
3. per user attributes - static IP addresses, framed routes, etc that are user specific.

This is done in a heirarchical type manner so that it's fairly easy to manage.

HTH.

regards,
Tony.


--- On Wed, 9/9/09, David Suarez - KNET <david@knet.es> wrote:









#yiv897207357 .tx {font-family:Geneva, Arial, Helvetica, sans-serif;font-size:12px;color:#7a1f5e;text-decoration:none;padding-left:20px;padding-right:20px;text-align:justify;}#yiv897207357 .linea {border-top-width:1px;border-right-width:1px;border-bottom-width:1px;border-left-width:1px;border-top-style:solid;border-right-style:none;border-bottom-style:none;border-left-style:none;border-top-color:#7A205E;border-right-color:#7A205E;border-bottom-color:#7A205E;border-left-color:#7A205E;}#yiv897207357 .tx1 {font-family:Verdana, Arial;font-size:11px;color:#7a1f5e;text-decoration:none;padding-right:15px;font-weight:600;}#yiv897207357 .tx2 {font-family:Verdana, Arial;font-size:11px;color:#7a1f5e;text-decoration:none;}#yiv897207357 .tx3 {font-family:Verdana, Arial;font-size:8px;color:#999999;text-decoration:none;padding-left:4px;PADDING-RIGHT:5px;PADDING-LEFT:5px;FONT-WEIGHT:normal;LINE-HEIGHT:normal;FONT-STYLE:normal;TEXT-ALIGN:justify;}#yiv897207357 A
{font-family:Verdana, Arial;font-size:11px;color:#999999;text-decoration:none;}#yiv897207357 A HOVER{color:#E4031B;text-decoration:none;}#yiv897207357 .lineabajo {border-top-width:1px;border-right-width:1px;border-bottom-width:1px;border-left-width:1px;border-top-style:none;border-right-style:none;border-bottom-style:solid;border-left-style:none;border-top-color:#7A205E;border-right-color:#7A205E;border-bottom-color:#7A205E;border-left-color:#7A205E;}#yiv897207357 .textopeq {font-family:Verdana, Arial, Helvetica, sans-serif;font-size:9px;color:#7E0A6E;}















Hi all,

 

Somebody knows if exist a cisco-avpair for virtual templates?

 

I have a lot of PPPoE sessions inbound my router for the same interface

 

interface FastEthernet0/0

 ip
address 192.168.113.1 255.255.255.0

duplex auto

 speed auto

 pppoe
enable group adslpersonal

!

bba-group pppoe adslpersonal

 virtual-template
13

 sessions per-mac limit 1

!

 

With this solution I only can
config one virtual-template for all users, but I would
like set one per user or per user-group via RADIUS.

ideas?

 

And, are
there a list of cisco-avpair commands?

 

Thanks in advance.

 

Regards.

 

David.




__________________________________________________________________________________
Get more done like never before with Yahoo!7 Mail.
Learn more: http://au.overview.mail.yahoo.com/
Re: avpair for virtual template [ In reply to ]
Hi Tony,

Do you have and example of this? Commands from cisco and from radius?

Thank you for your interest.

David.




David Suárez Rubio
SISTEMAS DE COMUNICACIÓN

[cid:imagebcc58d.gif@2fda4f20.0d204647]
[cid:image8a6083.gif@4743454e.477a459f] Avda. Club Deportivo, 55
26007 Logroño (La Rioja)
T. 902 44 90 90 F. 941 51 93 92
www.knet.es<http://www.knet.es/>

Política de privacidad<http://www.knet.es/mail/politica_privacidad.htm>




De: Tony [mailto:td_miles@yahoo.com]
Enviado el: miércoles, 09 de septiembre de 2009 15:22
Para: cisco-bba@puck.nether.net; David Suarez - KNET
Asunto: Re: [cisco-bba] avpair for virtual template

Hi David,

I'm not sure if there is a RADIUS attribute for virtual-template, someone else may be able to provide you with a definite answer.

As an alternative you could create a template that has all of the standard stuff in it and then groups/users to add anything you need for each connection. Using groups makes this easier to manage.

As an example we do the following:

1. default group - all users are a part of it, specifies things that every connection needs like "framed-protocol=PPP", etc.
2. group per VPN - has the VRF the connection will be part of and the loopback address that it will be associated with (each VRF has it's own loopback that is different)
3. per user attributes - static IP addresses, framed routes, etc that are user specific.

This is done in a heirarchical type manner so that it's fairly easy to manage.

HTH.

regards,
Tony.


--- On Wed, 9/9/09, David Suarez - KNET <david@knet.es> wrote:

Hi all,

Somebody knows if exist a cisco-avpair for virtual templates?

I have a lot of PPPoE sessions inbound my router for the same interface

interface FastEthernet0/0
ip address 192.168.113.1 255..255.255.0
duplex auto
speed auto
pppoe enable group adslpersonal
!
bba-group pppoe adslpersonal
virtual-template 13
sessions per-mac limit 1
!

With this solution I only can config one virtual-template for all users, but I would like set one per user or per user-group via RADIUS.
ideas?

And, are there a list of cisco-avpair commands?

Thanks in advance.

Regards.

David..


________________________________
Get more done like never before with Yahoo!7 Mail. Learn more<%20http://au..rd.yahoo.com/mail/newmail_september/*http:/au.overview.mail.yahoo.com/>.
Re: avpair for virtual template [ In reply to ]
Hi David,

Have you looked through the archives ? This type of question has been asked before:

http://puck.nether.net/pipermail/cisco-bba/2007-February/000842.html

A general search on the topic will reveal plenty of other sample configs.

As for a list of cisco-avpair commands, I'm sure it exists somewhere, but usually I just go searching for a specific avpair to do what I need. You can also look in the standard radius dictionary to see if it has what you need:
http://freeradius.org/rfc/attributes.html

Try something and see how you go. Feel free to ask more questions if you can't get something working.

regards,
Tony.

--- On Thu, 10/9/09, David Suarez - KNET <david@knet.es> wrote:

From: David Suarez - KNET <david@knet.es>
Subject: RE: [cisco-bba] avpair for virtual template
To: "Tony" <td_miles@yahoo.com>, "cisco-bba@puck.nether.net" <cisco-bba@puck.nether.net>
Received: Thursday, 10 September, 2009, 7:57 PM









#yiv1491266239 .tx {font-family:Geneva, Arial, Helvetica, sans-serif;font-size:12px;color:#7a1f5e;text-decoration:none;padding-left:20px;padding-right:20px;text-align:justify;}#yiv1491266239 .linea {border-top-width:1px;border-right-width:1px;border-bottom-width:1px;border-left-width:1px;border-top-style:solid;border-right-style:none;border-bottom-style:none;border-left-style:none;border-top-color:#7A205E;border-right-color:#7A205E;border-bottom-color:#7A205E;border-left-color:#7A205E;}#yiv1491266239 .tx1 {font-family:Verdana, Arial;font-size:11px;color:#7a1f5e;text-decoration:none;padding-right:15px;font-weight:600;}#yiv1491266239 .tx2 {font-family:Verdana, Arial;font-size:11px;color:#7a1f5e;text-decoration:none;}#yiv1491266239 .tx3 {font-family:Verdana, Arial;font-size:8px;color:#999999;text-decoration:none;padding-left:4px;PADDING-RIGHT:5px;PADDING-LEFT:5px;FONT-WEIGHT:normal;LINE-HEIGHT:normal;FONT-STYLE:normal;TEXT-ALIGN:justify;}#yiv1491266239 A
{font-family:Verdana, Arial;font-size:11px;color:#999999;text-decoration:none;}#yiv1491266239 A HOVER{color:#E4031B;text-decoration:none;}#yiv1491266239 .lineabajo {border-top-width:1px;border-right-width:1px;border-bottom-width:1px;border-left-width:1px;border-top-style:none;border-right-style:none;border-bottom-style:solid;border-left-style:none;border-top-color:#7A205E;border-right-color:#7A205E;border-bottom-color:#7A205E;border-left-color:#7A205E;}#yiv1491266239 .textopeq {font-family:Verdana, Arial, Helvetica, sans-serif;font-size:9px;color:#7E0A6E;}

















Hi Tony,

 

Do
you have and example of this? Commands from cisco and from radius?

 

Thank
you for your interest.

 



David.

 

 

 













David Suárez Rubio
SISTEMAS DE COMUNICACIÓN





Avda. Club Deportivo, 55
26007 Logroño (La Rioja)
T. 902 44 90 90 F. 941 51 93 92
www.knet.es


Política de privacidad









De: Tony
[mailto:td_miles@yahoo.com]

Enviado el: miércoles, 09 de
septiembre de 2009 15:22

Para: cisco-bba@puck.nether.net; David Suarez - KNET

Asunto: Re: [cisco-bba] avpair for
virtual template



 




Hi David,



I'm not sure if there is a RADIUS attribute for virtual-template, someone
else may be able to provide you with a definite answer.



As an alternative you could create a template that has all of the standard
stuff in it and then groups/users to add anything you need for each
connection. Using groups makes this easier to manage.



As an example we do the following:



1. default group - all users are a part of it, specifies things that every
connection needs like "framed-protocol=PPP", etc.

2. group per VPN - has the VRF the connection will be part of and the
loopback address that it will be associated with (each VRF has it's own
loopback that is different)

3. per user attributes - static IP addresses, framed routes, etc that are
user specific.



This is done in a heirarchical type manner so that it's fairly easy to
manage.



HTH.



regards,

Tony.





--- On Wed, 9/9/09, David Suarez - KNET <david@knet.es> wrote:
 



Hi all,
 
Somebody knows if exist a cisco-avpair
for virtual templates?
 
I have a lot of PPPoE
sessions inbound my router for the same interface
 
interface FastEthernet0/0
 ip
address 192.168.113.1 255..255.255.0
duplex auto
 speed
auto
 pppoe
enable group adslpersonal
!
bba-group pppoe
adslpersonal
 virtual-template
13
 sessions
per-mac limit 1
!
 
With this solution I only can config
one virtual-template for all users, but I would like set one per user or per
user-group via RADIUS.
ideas?
 
And, are there a list of cisco-avpair commands?
 
Thanks in advance.
 
Regards.
 
David..







 







Get more done like never before with Yahoo!7 Mail. Learn more.






__________________________________________________________________________________
Get more done like never before with Yahoo!7 Mail.
Learn more: http://au.overview.mail.yahoo.com/