Mailing List Archive

LNS Error on Cisco ASR 1004
Happy New Year everyone!

We currently use Cisco 7206 LNS(es). Everything works great. But we are now
looking to migrate LNS functions from the 7206 to an ASR 1004. Thought it
would be a straightforward thing, but for some reason, the ASR keeps
barking up this error:

"%FMANRP_ESS-4-FULLVAI: Session creation failed due to Full Virtual-Access
Interfaces not being supported. Check that all applied Virtual-Template and
RADIUS features support Virtual-Access sub-interfaces. swidb=
0x7FEDB5942B98, ifnum= 37"


The funny thing is, if the CPE is a Cisco 1841, the pppoe negotiation is
successfully negotiated, and everything works great. If some other CPE
however, we end up with the above error.

Any idea what we are doing wrong?



1. Here is the relevant cisco config on the ASR -

aaa new-model
aaa group server radius adslRADIUS
server x.x.xx.60 auth-port 1812 acct-port 1813
server x.x.50.xx auth-port 1812 acct-port 1813
deadtime 15
!
aaa authentication login default local
aaa authentication ppp hawVPDN group adslRADIUS
aaa authorization network hawVPDN group adslRADIUS
aaa authorization auth-proxy default group adslRADIUS
aaa accounting delay-start
aaa accounting update periodic 5
!
sgbp group bondadsl
sgbp member lns2-dsl x.x.xx.243
sgbp member lns1-dsl x.x.xx.242
sgbp member Aggr.RT2 x.x.xx.232
!
virtual-profile virtual-template 1
!
multilink virtual-template 1
multilink bundle-name authenticated
vpdn enable
vpdn multihop
vpdn logging
vpdn logging user
vpdn logging tunnel-drop
vpdn history failure table-size 50
!
vpdn-group adsl-ADSL
! Default L2TP VPDN group
accept-dialin
protocol l2tp
virtual-template 1
lcp renegotiation always
l2tp tunnel password 7 xxxxxxxxxxxx
ip pmtu
ip mtu adjust


!
interface Virtual-Template1
description adsl-ADSL-STATIC
mtu 1492
ip unnumbered GigabitEthernet0/2/0.34
no ip redirects
no ip proxy-arp
ip verify unicast reverse-path
ip tcp adjust-mss 1420
no logging event link-status
no peer default ip address
ppp mtu adaptive
ppp authentication pap hawVPDN
ppp authorization hawVPDN
ppp accounting hawVPDN
ppp chap refuse
ppp ipcp dns xx.xx.xx.234 xx.xx.xx.235
ppp multilink

!
radius-server host x.x.xx.60 auth-port 1812 acct-port 1813 key 7 xxxxxxxxxxx
radius-server host x.x.xx.61 auth-port 1812 acct-port 1813 key 7 xxxxxxxxxxx
radius-server retransmit 1


------------------------
2. Here are the attributes from the radius server:

----------------------
mysql> select * from radgroupreply where GroupName = 'telco1-pppoe-static' ;
+-----+--------------------+------------------------+----+------------------
--------------
---------------------------+
| id | GroupName | Attribute | op | Value

|
+-----+--------------------+------------------------+----+------------------
--------------

| 60 | telco1-pppoe-static | Service-Type | := | Framed-User
|
| 61 | telco1-pppoe-static | Framed-Protocol | := | PPP

| 62 | telco1-pppoe-static | Framed-IP-Netmask | := | 255.255.255.255

| 65 | telco1-pppoe-static | Tunnel-Server-Endpoint | += | :3:xx.xx.xx.171

| 66 | telco1-pppoe-static | Tunnel-Server-Endpoint | += | :2:xx.xx.xx.172

| 67 | telco1-pppoe-static | Tunnel-Password | += | :1:xxx.XXTxxx

| 68 | telco1-pppoe-static | Tunnel-Password | += | :2:xxx.XXTxxx

| 69 | telco1-pppoe-static | Tunnel-Preference | += | :1:10

| 70 | telco1-pppoe-static | Tunnel-Preference | += | :2:10

| 71 | telco1-pppoe-static | Tunnel-Medium-Type | += | :1:IP

| 72 | telco1-pppoe-static | Tunnel-Type | += | :1:L2TP

| 73 | telco1-pppoe-static | Tunnel-Medium-Type | += | :2:IP
| 74 | telco1-pppoe-static | Tunnel-Type | += | :2:L2TP

| 123 | telco1-pppoe-static | Cisco-Avpair | += |
interface-config=ppp ipcp dns xx.xx.xx.234 xx.xx.xx.235 |
| 127 | telco1-pppoe-static | Tunnel-Server-Endpoint | += | :1:xx.xx.xx.170

| 128 | telco1-pppoe-static | Tunnel-Preference | += | :3:10

| 129 | telco1-pppoe-static | Tunnel-Type | += | :3:L2TP

| 130 | telco1-pppoe-static | Tunnel-Medium-Type | += | :3:IP

| 131 | telco1-pppoe-static | Tunnel-Password | += | :3:xxx.XXTxxx

---------------------------+
19 rows in set (0.00 sec)
mysql>
Re: LNS Error on Cisco ASR 1004 [ In reply to ]
Try "test virtual-template X subinterface"





From: cisco-bba-bounces@puck.nether.net
[mailto:cisco-bba-bounces@puck.nether.net] On Behalf Of Dominic
Sent: Thursday, 3 January 2013 10:52 AM
To: cisco-bba@puck.nether.net
Subject: [cisco-bba] LNS Error on Cisco ASR 1004



Happy New Year everyone!

We currently use Cisco 7206 LNS(es). Everything works great. But we are now
looking to migrate LNS functions from the 7206 to an ASR 1004. Thought it
would be a straightforward thing, but for some reason, the ASR keeps
barking up this error:

"%FMANRP_ESS-4-FULLVAI: Session creation failed due to Full Virtual-Access
Interfaces not being supported. Check that all applied Virtual-Template and
RADIUS features support Virtual-Access sub-interfaces. swidb=

0x7FEDB5942B98, ifnum= 37"

The funny thing is, if the CPE is a Cisco 1841, the pppoe negotiation is
successfully negotiated, and everything works great. If some other CPE
however, we end up with the above error.

Any idea what we are doing wrong?

1. Here is the relevant cisco config on the ASR -

aaa new-model

aaa group server radius adslRADIUS

server x.x.xx.60 auth-port 1812 acct-port 1813

server x.x.50.xx auth-port 1812 acct-port 1813

deadtime 15

!

aaa authentication login default local

aaa authentication ppp hawVPDN group adslRADIUS

aaa authorization network hawVPDN group adslRADIUS

aaa authorization auth-proxy default group adslRADIUS

aaa accounting delay-start

aaa accounting update periodic 5

!

sgbp group bondadsl

sgbp member lns2-dsl x.x.xx.243

sgbp member lns1-dsl x.x.xx.242

sgbp member Aggr.RT2 x.x.xx.232

!

virtual-profile virtual-template 1

!

multilink virtual-template 1

multilink bundle-name authenticated

vpdn enable

vpdn multihop

vpdn logging

vpdn logging user

vpdn logging tunnel-drop

vpdn history failure table-size 50

!

vpdn-group adsl-ADSL

! Default L2TP VPDN group

accept-dialin

protocol l2tp

virtual-template 1

lcp renegotiation always

l2tp tunnel password 7 xxxxxxxxxxxx

ip pmtu

ip mtu adjust



!

interface Virtual-Template1

description adsl-ADSL-STATIC

mtu 1492

ip unnumbered GigabitEthernet0/2/0.34

no ip redirects

no ip proxy-arp

ip verify unicast reverse-path

ip tcp adjust-mss 1420

no logging event link-status

no peer default ip address

ppp mtu adaptive

ppp authentication pap hawVPDN

ppp authorization hawVPDN

ppp accounting hawVPDN

ppp chap refuse

ppp ipcp dns xx.xx.xx.234 xx.xx.xx.235

ppp multilink

!

radius-server host x.x.xx.60 auth-port 1812 acct-port 1813 key 7 xxxxxxxxxxx

radius-server host x.x.xx.61 auth-port 1812 acct-port 1813 key 7 xxxxxxxxxxx

radius-server retransmit 1



------------------------

2. Here are the attributes from the radius server:

----------------------

mysql> select * from radgroupreply where GroupName = 'telco1-pppoe-static' ;

+-----+--------------------+------------------------+----+------------------
--------------

---------------------------+

| id | GroupName | Attribute | op | Value


|

+-----+--------------------+------------------------+----+------------------
--------------

| 60 | telco1-pppoe-static | Service-Type | := | Framed-User
|

| 61 | telco1-pppoe-static | Framed-Protocol | := | PPP


| 62 | telco1-pppoe-static | Framed-IP-Netmask | := | 255.255.255.255


| 65 | telco1-pppoe-static | Tunnel-Server-Endpoint | += | :3:xx.xx.xx.171


| 66 | telco1-pppoe-static | Tunnel-Server-Endpoint | += | :2:xx.xx.xx.172


| 67 | telco1-pppoe-static | Tunnel-Password | += | :1:xxx.XXTxxx


| 68 | telco1-pppoe-static | Tunnel-Password | += | :2:xxx.XXTxxx


| 69 | telco1-pppoe-static | Tunnel-Preference | += | :1:10


| 70 | telco1-pppoe-static | Tunnel-Preference | += | :2:10


| 71 | telco1-pppoe-static | Tunnel-Medium-Type | += | :1:IP


| 72 | telco1-pppoe-static | Tunnel-Type | += | :1:L2TP


| 73 | telco1-pppoe-static | Tunnel-Medium-Type | += | :2:IP

| 74 | telco1-pppoe-static | Tunnel-Type | += | :2:L2TP


| 123 | telco1-pppoe-static | Cisco-Avpair | += |
interface-config=ppp ipcp dns xx.xx.xx.234 xx.xx.xx.235 |

| 127 | telco1-pppoe-static | Tunnel-Server-Endpoint | += | :1:xx.xx.xx.170


| 128 | telco1-pppoe-static | Tunnel-Preference | += | :3:10


| 129 | telco1-pppoe-static | Tunnel-Type | += | :3:L2TP


| 130 | telco1-pppoe-static | Tunnel-Medium-Type | += | :3:IP


| 131 | telco1-pppoe-static | Tunnel-Password | += | :3:xxx.XXTxxx


---------------------------+

19 rows in set (0.00 sec)

mysql>
Re: LNS Error on Cisco ASR 1004 [ In reply to ]
Hi Dominic,

On Jan 3, 2013, at 1:21 AM, "Dominic" <dominic@broadconnect.ca> wrote:

> "%FMANRP_ESS-4-FULLVAI: Session creation failed due to Full Virtual-Access Interfaces not being supported. Check that all applied Virtual-Template and RADIUS features support Virtual-Access sub-interfaces. swidb=
>
> 0x7FEDB5942B98, ifnum= 37"
>
>
> The funny thing is, if the CPE is a Cisco 1841, the pppoe negotiation is successfully negotiated, and everything works great. If some other CPE however, we end up with the above error.
>
> Any idea what we are doing wrong?

Some features you use may require a Full Virtual-Access to be created on the ASR which is, as far as I know, not supported on the ASR1k. Additionally some attributes sent by the radius may force the ASR to create a full Va. (Cisco-AVPair Interface-config is my first guess)

Is radius authentication performed and does the error appear _after_ the authentication during setup of the channel? If yes, try removing the following attribute from your tunnel configuration:

| 123 | telco1-pppoe-static | Cisco-Avpair | += | interface-config=ppp ipcp dns xx.xx.xx.234 xx.xx.xx.235 |

^^^^ (By the way: Does this attribute really make sense/matter at all? When you forward the session to a remote LAC IPCP is performed by the remote LAC not the LNS itself)

You may also try to add the following configuration line on the LNS:

aaa policy interface-config allow-subinterface

And/or add the following to the response attributes of that particular user on the radius:

Cisco-Avpair += lcp:interface-config=allow-subinterface=yes

Best regards

Christoph

--
SILVER SERVER \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\ \\ \
Ing Christoph Loibl, MSc <cl@sil.at> Senior Network Engineer
CL8-RIPE http://www.sil.at


_______________________________________________
cisco-bba mailing list
cisco-bba@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-bba
Re: LNS Error on Cisco ASR 1004 [ In reply to ]
Thanks for your suggestions, Chris:

$B"d(B ? If yes, try removing the following attribute from your tunnel
configuration:
$B"d(B | 123 | telco1-pppoe-static | Cisco-Avpair | += |
interface-config=ppp ipcp dns xx.xx.xx.234 xx.xx.xx.235 |

Yep, tried that, same result. I have whittled down the supplied radius
attributes to the barest minimum, but the result is the same. Also applied "
aaa policy interface-config allow-subinterface", both on the ASR and via
radius, and the result is same.

>> Is radius authentication performed and does the
>> error appear _after_ the authentication during setup of the channel?

After_authentication. As far as I can tell, the radius negotiation
completes successfully, the vtemplate is cloned successfully, and IP even
assigned, before interface goes down. See quick snapshot form the vtemplate
debug:


Jan 3 12:22:42 aggr.rt1 468674: 8w5d: VT[Vi3]:Added new vtemplate cloneblk,
now cloning from vtemplate
Jan 3 12:22:42 aggr.rt1 468675: 8w5d: VT[Vi3]:Clone Vaccess from
Virtual-Template1 (79 bytes)
Jan 3 12:22:42 aggr.rt1 468676: 8w5d: VT[Vi3]:mtu 1492
Jan 3 12:22:42 aggr.rt1 468677: 8w5d: VT[Vi3]:no ip redirects
Jan 3 12:22:42 aggr.rt1 468678: 8w5d: VT[Vi3]:ip tcp adjust-mss 1420
Jan 3 12:22:42 aggr.rt1 468679: 8w5d: VT[Vi3]:logging event link-status
Jan 3 12:22:42 aggr.rt1 468680: 8w5d: VT[Vi3]:end
Jan 3 12:22:42 aggr.rt1 468681: 8w5d: VT[Vi3]:Applying config commands on
process "VTEMPLATE Background Mgr" (528)
Jan 3 12:22:42 aggr.rt1 468682: 8w5d: VT[Vi3]:mtu 1492
Jan 3 12:22:42 aggr.rt1 468683: 8w5d: VT[Vi3]:no ip redirects
Jan 3 12:22:42 aggr.rt1 468684: 8w5d: VT[Vi3]:ip tcp adjust-mss 1420
Jan 3 12:22:42 aggr.rt1 468685: 8w5d: VT[Vi3]:logging event link-status
Jan 3 12:22:42 aggr.rt1 468686: 8w5d: VT[Vi3]:end
Jan 3 12:22:42 aggr.rt1 468687: 8w5d: VT[Vi3]:Request took 2 msec, 2 msec
processing time
Jan 3 12:22:42 aggr.rt1 468688: 8w5d: VT[Vi3]:MTUs ip 1492, sub 1492, max
1492, default 1500
Jan 3 12:22:42 aggr.rt1 468689: 8w5d: VT[Vi3]:Processing vaccess response,
id 0x6D000D09, result success (1)
Jan 3 12:22:42 aggr.rt1 468690: Jan 3 12:22:42: %LINEPROTO-5-UPDOWN: Line
protocol on Interface Virtual-Access3, changed state to up
Jan 3 12:22:42 aggr.rt1 468691: Jan 3 12:22:42: %LINK-3-UPDOWN: Interface
Virtual-Access3, changed state to up
Jan 3 12:22:42 aggr.rt1 468692: Jan 3 12:22:42: %FMANRP_ESS-4-FULLVAI:
Session creation failed due to Full Virtual-Access Interfaces not being
supported. Check that all applied Virtual-Template and RADIUS features
support Virtual-Access sub-interfaces. swidb= 0x7FEDB5942B98, ifnum= 37


Dominic

-----Original Message-----
From: Christoph Loibl [mailto:cl@sil.at]
Sent: Thursday, January 03, 2013 2:40 AM
To: Dominic
Cc: cisco-bba@puck.nether.net
Subject: Re: [cisco-bba] LNS Error on Cisco ASR 1004

Hi Dominic,

On Jan 3, 2013, at 1:21 AM, "Dominic" <dominic@broadconnect.ca> wrote:

> "%FMANRP_ESS-4-FULLVAI: Session creation failed due to Full Virtual-Access
Interfaces not being supported. Check that all applied Virtual-Template and
RADIUS features support Virtual-Access sub-interfaces. swidb=
>
> 0x7FEDB5942B98, ifnum= 37"
>
>
> The funny thing is, if the CPE is a Cisco 1841, the pppoe negotiation is
successfully negotiated, and everything works great. If some other CPE
however, we end up with the above error.
>
> Any idea what we are doing wrong?

Some features you use may require a Full Virtual-Access to be created on the
ASR which is, as far as I know, not supported on the ASR1k. Additionally
some attributes sent by the radius may force the ASR to create a full Va.
(Cisco-AVPair Interface-config is my first guess)

Is radius authentication performed and does the error appear _after_ the
authentication during setup of the channel? If yes, try removing the
following attribute from your tunnel configuration:

| 123 | telco1-pppoe-static | Cisco-Avpair | += |
interface-config=ppp ipcp dns xx.xx.xx.234 xx.xx.xx.235 |

^^^^ (By the way: Does this attribute really make sense/matter at all? When
you forward the session to a remote LAC IPCP is performed by the remote LAC
not the LNS itself)

You may also try to add the following configuration line on the LNS:

aaa policy interface-config allow-subinterface

And/or add the following to the response attributes of that particular user
on the radius:

Cisco-Avpair += lcp:interface-config=allow-subinterface=yes

Best regards

Christoph

--
SILVER SERVER \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\ \\ \
Ing Christoph Loibl, MSc <cl@sil.at> Senior Network Engineer
CL8-RIPE http://www.sil.at
Re: LNS Error on Cisco ASR 1004 [ In reply to ]
Hi Dominic,

On Jan 3, 2013, at 6:32 PM, "Dominic" <dominic@broadconnect.ca> wrote:

> Yep, tried that, same result. I have whittled down the supplied radius attributes to the barest minimum, but the result is the same. Also applied " aaa policy interface-config allow-subinterface",both on the ASR and via radius, and the result is same.

I looked into some of the radius configs and found that we are using:

Cisco-AVPair += "lcp:allow-subinterface=yes"

not

Cisco-Avpair += "lcp:interface-config=allow-subinterface=yes"

As I wrote earlier that day - but this may very well be completely equivalent.

As far as I remember there are/were some restrictions regarding multilink ppp on the ASR1k - at least with older firmware (if it is supported at all, probably only for LFI I don't really remember). You may also want to remove this configuration from your VT and check what firmware you are running.

I think some restrictions regarding Full-ViA and Subinterface-ViA have been removed in recent firmwares.

Regarding your log:

Jan 3 12:22:42 aggr.rt1 468674: 8w5d: VT[Vi3]:Added new vtemplate cloneblk, now cloning from vtemplate

It seems to clone a Full-Virtual-Access right from the beginning (otherwise it would write "VT[ViX.Y]" into its log). - There is something happening before the cloning happens that forces the router to clone a Full-ViA.

Good luck,

Christoph

--
SILVER SERVER \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\ \\ \
Ing Christoph Loibl, MSc <cl@sil.at> Senior Network Engineer
CL8-RIPE http://www.sil.at


_______________________________________________
cisco-bba mailing list
cisco-bba@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-bba
Re: LNS Error on Cisco ASR 1004 [ In reply to ]
Hi Dominic,

You say that it works if you connect different CPE (eg. 1841) up, but not some others. Perhaps you should look at it from the other end and do a "debug ppp negotiation" (or similar) from a CPE that works and one that doesn't work. This might give you some more insight into what the problem is. Perhaps it is something that the CPE is trying to negotiate that is forcing the ASR's hand.

I saw this thread in a quick search:
https://supportforums.cisco.com/thread/2146819

where the problem was this attribute "Framed-Compression := Van-Jacobsen-TCP-IP", so it can really be any attribute that the ASR doesn't like, you just need to narrow down to what it is.


regards,
Tony.







>________________________________
> From: Dominic <dominic@broadconnect.ca>
>To: cisco-bba@puck.nether.net
>Sent: Thursday, 3 January 2013 10:21 AM
>Subject: [cisco-bba] LNS Error on Cisco ASR 1004
>
>
>LNS Error on Cisco ASR 1004
>Happy New Year everyone!
>We currently use Cisco 7206 LNS(es). Everything works great.  But we are now looking  to migrate LNS functions  from the 7206 to an  ASR 1004. Thought it would be a straightforward thing, but  for some reason, the ASR keeps barking up this error:
>"%FMANRP_ESS-4-FULLVAI: Session creation failed due to Full Virtual-Access Interfaces not being supported. Check that all applied Virtual-Template and RADIUS features support Virtual-Access sub-interfaces. swidb=
>0x7FEDB5942B98, ifnum= 37"
>The funny thing is, if the CPE is a Cisco 1841, the pppoe negotiation is successfully negotiated, and everything works great. If some other CPE however, we end up with the above error. 
>Any idea what we are doing wrong?      
>1.     Here is the relevant cisco config on the ASR -
>aaa new-model
>aaa group server radius adslRADIUS
> server x.x.xx.60 auth-port 1812 acct-port 1813
> server x.x.50.xx auth-port 1812 acct-port 1813
> deadtime 15
>!
>aaa authentication login default local
>aaa authentication ppp hawVPDN group adslRADIUS
>aaa authorization network hawVPDN group adslRADIUS
>aaa authorization auth-proxy default group adslRADIUS
>aaa accounting delay-start
>aaa accounting update periodic 5
>!
>sgbp group bondadsl
>sgbp member lns2-dsl x.x.xx.243
>sgbp member lns1-dsl x.x.xx.242
>sgbp member Aggr.RT2 x.x.xx.232
>!
>virtual-profile virtual-template 1
>!
>multilink virtual-template 1
>multilink bundle-name authenticated
>vpdn enable
>vpdn multihop
>vpdn logging
>vpdn logging user
>vpdn logging tunnel-drop
>vpdn history failure table-size 50
>!
>vpdn-group adsl-ADSL
> ! Default L2TP VPDN group
> accept-dialin
>  protocol l2tp
> virtual-template 1
> lcp renegotiation always
> l2tp tunnel password 7 xxxxxxxxxxxx
> ip pmtu
> ip mtu adjust
>
>!
>interface Virtual-Template1
> description adsl-ADSL-STATIC
> mtu 1492
> ip unnumbered GigabitEthernet0/2/0.34
> no ip redirects
> no ip proxy-arp
> ip verify unicast reverse-path
> ip tcp adjust-mss 1420
> no logging event link-status
> no peer default ip address
> ppp mtu adaptive
> ppp authentication pap hawVPDN
> ppp authorization hawVPDN
> ppp accounting hawVPDN
> ppp chap refuse
> ppp ipcp dns xx.xx.xx.234 xx.xx.xx.235
> ppp multilink
>!
>radius-server host x.x.xx.60 auth-port 1812 acct-port 1813 key 7 xxxxxxxxxxx
>radius-server host x.x.xx.61 auth-port 1812 acct-port 1813 key 7 xxxxxxxxxxx
>radius-server retransmit 1
>
>------------------------
>2. Here  are the attributes from the radius server:
>----------------------
>mysql> select * from radgroupreply where GroupName = 'telco1-pppoe-static' ;
>+-----+--------------------+------------------------+----+--------------------------------
>---------------------------+
>| id  | GroupName          | Attribute              | op | Value                         
>                          |
>+-----+--------------------+------------------------+----+--------------------------------
>|  60 | telco1-pppoe-static | Service-Type           | := | Framed-User                                              |
>|  61 | telco1-pppoe-static | Framed-Protocol        | := | PPP                           
>|  62 | telco1-pppoe-static | Framed-IP-Netmask      | := | 255.255.255.255               
>|  65 | telco1-pppoe-static | Tunnel-Server-Endpoint | += | :3:xx.xx.xx.171            
>|  66 | telco1-pppoe-static | Tunnel-Server-Endpoint | += | :2:xx.xx.xx.172            
>|  67 | telco1-pppoe-static | Tunnel-Password        | += | :1:xxx.XXTxxx                     
>|  68 | telco1-pppoe-static | Tunnel-Password        | += | :2:xxx.XXTxxx                     
>|  69 | telco1-pppoe-static | Tunnel-Preference      | += | :1:10                         
>|  70 | telco1-pppoe-static | Tunnel-Preference      | += | :2:10                         
> |  71 | telco1-pppoe-static | Tunnel-Medium-Type     | += | :1:IP                         
> |  72 | telco1-pppoe-static | Tunnel-Type            | += | :1:L2TP                       
>|  73 | telco1-pppoe-static | Tunnel-Medium-Type     | += | :2:IP     
>|  74 | telco1-pppoe-static | Tunnel-Type            | += | :2:L2TP                       
>| 123 | telco1-pppoe-static | Cisco-Avpair           | += | interface-config=ppp ipcp dns xx.xx.xx.234 xx.xx.xx.235 |
>| 127 | telco1-pppoe-static | Tunnel-Server-Endpoint | += | :1:xx.xx.xx.170            
>| 128 | telco1-pppoe-static | Tunnel-Preference      | += | :3:10                         
>| 129 | telco1-pppoe-static | Tunnel-Type            | += | :3:L2TP                       
>| 130 | telco1-pppoe-static | Tunnel-Medium-Type     | += | :3:IP                         
>| 131 | telco1-pppoe-static | Tunnel-Password        | += | :3:xxx.XXTxxx                     
>---------------------------+
>19 rows in set (0.00 sec)
>mysql>
>_______________________________________________
>cisco-bba mailing list
>cisco-bba@puck.nether.net
>https://puck.nether.net/mailman/listinfo/cisco-bba
>
>