Hi Everyone,
Posting this as it made for quite an interesting debug, and am hoping to save someone some future grief.
When using ASR 1ks and ios XE Amsterdam 17.3.6 we encountered an issue related to pppoe users and radius attributes.
We saw issues trying to send cisco AV pair ip:outacl or ip:inacl from radius.
The user would authenticate and we would see immediately
ppp-disconnect-cause(329) 24 Lower Layer disconnected
debugs showed all things looking good, no unsupported attributes etc. and in the brief instant it came up the acl was programed, but the user would be disconnected immediately.
We narrowed it down to the ip:outacl/ip:inacl as if it was removed from the users radius configuration everything would work fine.
Upgrading to 17.6.3a resolved the issue.
I couldn't find a matching bug and nothing was in the release notes.
As this was a non-production system we just upgraded and did not bother with a tac case.
HTH
Brian
_______________________________________________
cisco-nsp mailing list cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
Posting this as it made for quite an interesting debug, and am hoping to save someone some future grief.
When using ASR 1ks and ios XE Amsterdam 17.3.6 we encountered an issue related to pppoe users and radius attributes.
We saw issues trying to send cisco AV pair ip:outacl or ip:inacl from radius.
The user would authenticate and we would see immediately
ppp-disconnect-cause(329) 24 Lower Layer disconnected
debugs showed all things looking good, no unsupported attributes etc. and in the brief instant it came up the acl was programed, but the user would be disconnected immediately.
We narrowed it down to the ip:outacl/ip:inacl as if it was removed from the users radius configuration everything would work fine.
Upgrading to 17.6.3a resolved the issue.
I couldn't find a matching bug and nothing was in the release notes.
As this was a non-production system we just upgraded and did not bother with a tac case.
HTH
Brian
_______________________________________________
cisco-nsp mailing list cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/