ASR - 1002 and Ip radius

hi all,
my customer trying to remove the aaa and tacacs server from the device and fails.
router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
router(config)#no ip radius source-interface Loopback0 vrf DATA
router(config)#no ip radius source-interface Loopback0 vrf Mgmt
router(config)#do sh run | se radius
ip radius source-interface Loopback0 vrf BB2DATA
ip radius source-interface Loopback0 vrf Mgmt-intf
router(config)#no ip radiu
router(config)#no ip radius sou
router(config)#no ip radius source-interface loo
router(config)#no ip radius source-interface loo
router(config)#no ip radius source-interface loop
router(config)#no ip radius source-interface ?
<cr>
router(config)#no ip radius source-interface
router(config)#do sh run | se radius
ip radius source-interface Loopback0 vrf DATA
ip radius source-interface Loopback0 vrf Mgmt
we also tried removing the ip radius without the interface and still shows up with the above results.
rebooting is not an option as this is on a production environment.
currently he is on  Cisco IOS Software, IOS-XE Software (PPC_LINUX_IOSD-ADVIPSERVICESK9-M), Version 15.2(1)S, RELEASE SOFTWARE (fc1)and I could not find any bug/s on cisco tools.
with kind regards,
Lance

Hi Lance,
Can you try like this as mentioned in the below command. This might solve your problem.
conf t# default ip radius source-interface Loopback0 vrf DATA
I made this attempt in a lab scenario it worked out.
R1(config)#do sh runn | in blue
ip vrf blue
ip radius source-interface Loopback0 vrf blue
R1(config)#def
R1(config)#defa
R1(config)#default ip radius source-interface loopback 0 vrf blue
R1(config)#do sh runn | in blue
ip vrf blue
R1(config)#ip vrf
Hope this helps
Regards
Karthik

Similar Messages

  • ASR 1002

    Hello all,
    I have 1 Cisco ASR 1002 configured as a normal edge router connecting to ISP.
    When i used ftp service from PC outside to servers inside, the FTP service ran normally in the morning but it is slower by afternoon and till the end of the working day, client PC couldn't work anymore
    So, i restarted ASR 1002 and it did work well again
    The next day, i replaced ASR 1002 with Cisco router 2801, configured the same extractly. And there's not problem anymore.
    Then, I tried ASR 1002 and it's in trouble again. Now, i have to use 2801.....
    I have checked log and see:
    *Feb 19 14:10:58.143: %QFPOOR-4-LOWRSRC_PERCENT: F0: cpp_ha:  QFP 0 DRAM resource low - 97 percent depleted
    *Feb 19 14:36:22.271: %QFPOOR-4-LOWRSRC_PERCENT: F0: cpp_ha:  QFP 0 DRAM resource low - 98 percent depleted
    *Feb 19 15:02:16.368: %QFPOOR-4-LOWRSRC_PERCENT: F0: cpp_ha:  QFP 0 IRAM resource low - 99 percent depleted
    So i did use command:
    show platform hardware qfp active infra exmem statistics user:
    Type: Name: IRAM, QFP: 0
      Allocations  Bytes-Alloc  Bytes-Total  User-Name                                
      1            115200       115712       CPP_FIA                                  
      1902         125440704    126597120    NAT                                      
    Type: Name: GLOBAL, QFP: 0
      Allocations  Bytes-Alloc  Bytes-Total  User-Name                                
      7            14544        18432        P/I                                      
      7            270696       274432       CEF                                      
      1            512          1024         B2B HA                                   
      1            1138256      1138688      QM RM                                    
      1            16384        16384        Qm 16                                    
      1            524288       524288       TCAM                                     
      3            4210688      4210688      ING_EGR_UIDB                             
      1            835584       835584       ING EGR INPUT CHUNK_Config_0             
      1            16384        16384        ING EGR INPUT CHUNK_Sm_Name_0            
      1            32768        32768        ING EGR INPUT CHUNK_Lg_Name_0            
      1            770048       770048       ING EGR OUTPUT CHUNK_Config_0            
      1            16384        16384        ING EGR OUTPUT CHUNK_Sm_Name_0           
      1            32768        32768        ING EGR OUTPUT CHUNK_Lg_Name_0           
      1            16384        16384        ING EGR OUTPUT CHUNK_Queue_0             
      1            16384        16384        ING-EGR_IfMap_0                          
      4            25856        28672        GIC                                      
      1            1048576      1048576      PLU Mgr_CEF_0_0                          
      1            1048576      1048576      PLU Mgr_CEF_0_3                          
      1            1048576      1048576      PLU Mgr_CEF_0_7                          
      1            1572864      1572864      PLU Mgr_CEF_0_8                          
      1            1048576      1048576      PLU Mgr_PLU_GLOBAL_0_0                   
      1            1048576      1048576      PLU Mgr_PLU_GLOBAL_0_1                   
      1            786432       786432       PLU Mgr_PLU_GLOBAL_0_2                   
      1            1048576      1048576      PLU Mgr_PLU_GLOBAL_0_3                   
      1            1310720      1310720      PLU Mgr_PLU_GLOBAL_0_4                   
      1            786432       786432       PLU Mgr_PLU_GLOBAL_0_5                   
      1            917504       917504       PLU Mgr_PLU_GLOBAL_0_6                   
      1            1048576      1048576      PLU Mgr_PLU_GLOBAL_0_7                   
      1            1572864      1572864      PLU Mgr_PLU_GLOBAL_0_8                   
      21           5223968      5235712      ALG                                      
      3            4400         7168         LI                                       
      1            64           1024         cpp_li_sbs_client                        
    Type: Name: GLOBAL, QFP: 0
      Allocations  Bytes-Alloc  Bytes-Total  User-Name                                
      5            34836        38912        SSLVPN                                   
      1            2048         2048         SMI                                      
      1            40           1024         cpp_smi_sbs_client                       
      1            6528         7168         cpp_pbr_sbs_client                       
      3            1540836      1543168      TD                                       
      787          64665040     65135616     NAT                                      
      3            24000        24576        TUNNEL                                   
      1            4384         5120         ERSPAN                                   
      1            112          1024         cpp_erspan_sbs_client                    
      12           627008       630784       ESS                                      
      2            32           2048         ICMP                                     
      1            32000        32768        cpp_icmp_sb_chunk                        
      1            524288       524288       QoS 1024                                 
      1            4096         4096         SPAMARMOT                                
      1            32768        32768        ethernet                                 
      1            16384        16384        PALCI CLIENT                             
      3            8064         9216         cpp_punt_sbs_client                      
      1            320          1024         punt path chunk 0                        
      1            32000        32768        punt subblock chunk                      
      21           8064         21504        punt policer chunk                       
      17           515984       529408       PKTLOG                                   
      1            512          1024         queue info chunk 0                       
      1            16           1024         CPP IPHC                                 
      7            1286432      1288192      IPFRAG                                   
      1            16000        16384        cpp_ipfrag_sb_chunk                      
      10           26048        34816        cpp_ipfrag_sbs_client                    
      1            32000        32768        cpp_ipreass_sb_chunk                     
      1            16000        16384        cpp_ipreass_cur_dgram_cnt_chunk          
      1            64000        64512        cpp_ipvfr_sb_chunk                       
      1            64000        64512        cpp_ipv6reass_sb_chunk                   
      1            6528         7168         sbs_cef                                  
      1            16000        16384        cpp_tunnel_subblock                      
    Type: Name: GLOBAL, QFP: 0
      Allocations  Bytes-Alloc  Bytes-Total  User-Name                                
      1            32000        32768        cpp_ipv4_tunnel_hash_elem                
      1            4096         4096         NAT SB                                   
      1            16384        16384        cpp_pbr_action_chunk   
    I found : NAT is the feature that hold most of the memory. What can i do now

    On the Cisco ASR 1000 Series Routers, IOS runs as one of many processes within the operating system. This is different than on traditional Cisco IOS, where all processes are run within Cisco IOS.
    This architecture allows for software redundancy opportunities that are not available on other platforms that run Cisco IOS software. Specifically, a standby IOS process can be available on the same Route Processor as the active IOS process. This standby IOS process can be switched to in the event of an IOS failure, and can also be used to upgrade subpackage software in some scenarios as the standby IOS process in an ISSU upgrade.
    Following Table shows Software Redundancy Overview:
    Router
    Support for Two IOS Processes on Same Route Processor
    Support for a Second IOS Process on Standby Route Processor
    Explanation
    Cisco ASR 1001 Router1
    Yes
    N/A
    The Cisco ASR 1001 Router only supports one RP, so dual IOS processes run on the lone RP.
    Cisco ASR 1002 Router
    Yes
    N/A
    The Cisco ASR 1002 Router only supports one RP, so dual IOS processes run on the lone RP.
    Cisco ASR 1004 Router
    Yes
    N/A
    The Cisco ASR 1004 Router only supports one RP, so dual IOS processes run on the lone RP.
    Cisco ASR 1006 Router
    No
    Yes
    The Cisco ASR 1006 Router supports a second Route Processor, so the second IOS process can only run on the standby Route Processor.
     For more details check:
    Software Redundancy on the Cisco ASR 1000 Series Routers
    -Thanks
    Vinod
    **Encourage Contributors. RATE Them.**

  • ASR 1002-X, IOS XE and ISG

    Hello All.
    I started using asr 1002-x with IOS XE instead of 7201 as ISG + AAA + RADIUS.
    I had a question on IOS XE 3.11, 3.10, 3.9.
    Command "radius-server vsa send ..."  is in a configuration, however it isn't applied and doesn't appear in running-config.
    cod-r8(config)#radius-server vsa send?
      accounting Send in accounting requests
      authentication Send in access requests
      cisco-nas-port Send cisco-nas-port VSA (2)
      <cr>
    cod-r8(config)#radius-server vsa send accounting 
    cod-r8(config)#radius-server vsa send authentication           
    cod-r8(config)#radius-server vsa send cisco-nas-port
    cod-r8(config)#do sh run | include vsa
    radius-server vsa send cisco-nas-port</cr>
    It turns out that vsa is included by default or doesn't work at all?
    Thanks.
    Konstantin

    Hi Konstantin,
    Regarding "It is strange that these commands cleaned from sh run view.": this is normal for many default configuration commands.
    Mine is a lab device so I cannot really comment on stability or provide you a recommendation based on that. However, I see that the download section from Cisco.com mentiones the following release as the recommended based on quality, stability and longevity:
    asr1002x-universal.03.07.04a.S.152-4.S4a.SPA.bin
    The best would be for you to check this with yor cisco Account Team or Advanced Services Team as normally they are the proper point of contacts for SW advisory.
    Regards.

  • Migrate PPPoE/Virtual-Interface from 7206VXR to ASR 1002

    Good Day,
    I have been attempting to migrate services from an existing 7206VXR to a recently purchased ASR1002 and could use some help.
    My mistake in assuming that the config would be similar to 7206VXR, but there are changes - mainly VRF and cisco-avpair attributes that need added to radius.
    Our lab test, with the below ASR config will allow the user to authenticate successfully but does not assign IP address.
    User Status
    User is online
    Last Connection
    2012-09-21 10:27:47
    Online Time
    1 hours, 4 minutes, 15 seconds
    Server (NAS)
    206.251.40.52 (MAC: )
    User Workstation
    (MAC: )
    User Upload
    6.5 Kb
    User Download
    6.51 Kb
    ID
    HotSpot
    Username
    IP Address
    Start Time
    Stop Time
    Total Time
    Upload (Bytes)
    Download (Bytes)
    Termination
    NAS IP Address
    7837056
    [email protected]
    2012-09-21 10:27:47
    1 hours, 4 minutes, 15 seconds
    6.5 Kb
    6.51 Kb
    206.251.40.52
    I have also tried assigning a static IP to the CPE, however the CPE cannot see 199.200.107.1.
    No doubt the problem is something simple I appreciate any help or suggestions.
    Radius Reply Attributes
    Cisco-AVPair += ip:vrf-id=CV_VRF
    Cisco-AVPair += ip:ip-unnumbered=Loopback 111 (generates unsupported sub-interface errors when used)
    7206VXR Config-
    aaa new-model
    aaa authentication login default group radius
    aaa authentication login con none
    aaa authentication login vty line local
    aaa authentication login localauth local
    aaa authentication ppp default if-needed group radius
    aaa authorization network default group radius
    aaa authorization network noauth none
    aaa accounting update periodic 5
    aaa accounting network default
    action-type start-stop
    group radius
    aaa accounting system default
    action-type start-stop
    group radius
    bba-group pppoe 156
    virtual-template 156
    sessions per-vc limit 65000
    sessions per-mac limit 65000
    sessions per-vlan limit 65000
    interface Loopback0
    ip address 10.1.1.3 255.255.255.255
    ip ospf network point-to-point
    interface GigabitEthernet0/1
    no ip address
    no ip redirects
    duplex full
    speed 1000
    media-type rj45
    no negotiation auto
    no cdp enable
    interface GigabitEthernet0/1.20
    description ROUTER GATEWAY
    encapsulation dot1Q 20
    ip address 206.251.40.51 255.255.255.248
    no cdp enable
    interface GigabitEthernet0/2
    no ip address
    no ip redirects
    duplex full
    speed 1000
    media-type rj45
    no negotiation auto
    no cdp enable
    interface GigabitEthernet0/2.156
    encapsulation dot1Q 156
    ip address 199.30.185.1 255.255.255.0 secondary
    ip address 199.30.186.1 255.255.255.0 secondary
    ip address 199.30.187.1 255.255.255.0 secondary
    ip address 199.30.184.1 255.255.255.0
    pppoe enable group 156
    no cdp enable
    interface Virtual-Template156
    ip unnumbered GigabitEthernet0/2.156
    no ip redirects
    no ip route-cache cef
    peer default ip address pool IP_POOL156
    ppp mtu adaptive
    ppp authentication pap
    ip local pool IP_POOL156 199.30.184.2 199.30.184.254
    ip local pool IP_POOL156 199.30.185.2 199.30.185.254
    ip local pool IP_POOL156 199.30.186.2 199.30.186.254
    ip local pool IP_POOL156 199.30.187.2 199.30.187.254
    no ip forward-protocol nd
    no ip http server
    no ip http secure-server
    ip route 199.30.184.0 255.255.252.0 Null0 200
    ip prefix-list AS19045 seq 10 permit 199.30.184.0/22
    ip radius source-interface GigabitEthernet0/1.20
    radius-server host x.x.x.x auth-port 1812 acct-port 1813
    radius-server retransmit 1
    radius-server timeout 60
    radius-server key ********
    radius-server vsa send accounting
    radius-server vsa send authentication
    ASR 1002 Config (attempt)
    aaa new-model
    aaa group server radius AAA_CV_VRF
    server 208.98.188.6 auth-port 1812 acct-port 1813
    aaa authentication login default group AAA_CV_VRF
    aaa authentication login con none
    aaa authentication login vty line local
    aaa authentication login localauth local
    aaa authentication ppp default if-needed group AAA_CV_VRF
    aaa authorization network default group AAA_CV_VRF
    aaa authorization network noauth none
    aaa accounting update newinfo periodic 60
    aaa accounting network default start-stop group AAA_CV_VRF
    aaa accounting connection default start-stop group AAA_CV_VRF
    aaa accounting system default
    action-type start-stop
    group AAA_CV_VRF
    aaa accounting resource default start-stop group AAA_CV_VRF
    aaa session-id common
    aaa policy interface-config allow-subinterface
    clock timezone MST -7 0
    clock summer-time MST recurring
    no ip source-route
    ip vrf CV_VRF
    rd 1:1
    virtual-profile if-needed
    multilink bundle-name authenticated
    bba-group pppoe 111
    description TEST
    virtual-template 111
    sessions per-vc limit 65000
    sessions per-mac limit 65000
    sessions per-vlan limit 65000
    sessions auto cleanup
    interface Loopback0
    ip address 10.1.1.4 255.255.255.255
    ip ospf network point-to-point
    interface Loopback111
    description TEST
    ip vrf forwarding CV_VRF
    ip address 199.200.107.1 255.255.255.0
    interface GigabitEthernet0/0/2
    no ip address
    no ip redirects
    no negotiation auto
    interface GigabitEthernet0/0/2.20
    description ROUTER GATEWAY
    encapsulation dot1Q 20
    ip address 206.251.40.52 255.255.255.248
    interface GigabitEthernet0/0/3
    no ip address
    no ip redirects
    no negotiation auto
    interface GigabitEthernet0/0/3.111
    encapsulation dot1Q 111
    ip vrf forwarding CV_VRF
    no ip proxy-arp
    pppoe enable group 111
    interface Virtual-Template111
    ip unnumbered GigabitEthernet0/0/3.111
    no ip redirects
    no ip route-cache cef
    peer default ip address pool IP_POOL111
    ppp mtu adaptive
    ppp authentication pap
    router ospf 19045
    router-id 10.1.1.4
    network 10.1.1.4 0.0.0.0 area 0.0.0.0
    network 199.200.107.0 0.0.0.255 area 0.0.0.0
    network 206.251.40.48 0.0.0.7 area 0.0.0.0
    router bgp 19045
    bgp log-neighbor-changes
    network 199.200.104.0 mask 255.255.252.0
    network 206.251.40.0 mask 255.255.248.0
    neighbor 10.1.1.1 remote-as 19045
    neighbor 10.1.1.1 description IBGP_PEER_ASR
    neighbor 10.1.1.1 update-source Loopback0
    neighbor 10.1.1.1 next-hop-self
    ip local pool IP_POOL111 199.200.107.2 199.200.107.254
    no ip forward-protocol nd
    no ip http server
    no ip http secure-server
    ip route 0.0.0.0 0.0.0.0 206.251.40.49
    ip route 199.200.104.0 255.255.252.0 Null0 200
    ip prefix-list AS19045 seq 10 permit 199.200.104.0/22
    ip radius source-interface GigabitEthernet0/0/2.20
    radius-server host x.x.x.x auth-port 1812 acct-port 1813 key ********
    radius-server retransmit 1
    radius-server timeout 60
    radius-server vsa send accounting
    radius-server vsa send authentication
    Debug Info
    *Sep 20 22:03:26.677: [910]PPPoE 1911: AAA get dynamic attrs
    *Sep 20 22:03:26.678: [910]PPPoE 1911: O PADT  R:6468.0cf7.8546 L:f866.f287.7c83 Gi0/0/3.111
    *Sep 20 22:03:26.678: [910]PPPoE 1911: Destroying  R:6468.0cf7.8546 L:f866.f287.7c83 111 Gi0/0/3.111
    *Sep 20 22:03:26.678: PPPoE: Returning Vaccess Virtual-Access3
    *Sep 20 22:03:26.679: [910]PPPoE 1911: AAA get dynamic attrs
    *Sep 20 22:03:26.679: [910]PPPoE 1911: AAA account stopped
    *Sep 20 22:03:26.679: RADIUS/ENCODE(00000791):Orig. component type = PPPoE
    *Sep 20 22:03:26.679: RADIUS(00000791): Config NAS IP: 0.0.0.0
    *Sep 20 22:03:26.679: RADIUS(00000791): Config NAS IPv6: ::
    *Sep 20 22:03:26.679: RADIUS(00000791): sending
    *Sep 20 22:03:26.682: %LINK-3-UPDOWN: Interface Virtual-Access3, changed state to down
    *Sep 20 22:03:26.682: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
    *Sep 20 22:03:26.683: RADIUS/ENCODE: Best Local IP-Address 206.251.40.52 for Radius-Server 208.98.188.6
    *Sep 20 22:03:26.683: RADIUS(00000791): Sending a IPv4 Radius Packet
    *Sep 20 22:03:26.683: RADIUS(00000791): Send Accounting-Request to 208.98.188.6:1813 id 1646/71,len 379
    *Sep 20 22:03:26.683: RADIUS:  authenticator A6 50 A4 C3 2A 30 AB DA - 59 BF E8 75 8A 91 AA 9B
    *Sep 20 22:03:26.683: RADIUS:  Acct-Session-Id     [44]  10  "00000D51"
    *Sep 20 22:03:26.683: RADIUS:  Framed-Protocol     [7]   6   PPP                       [1]
    *Sep 20 22:03:26.683: RADIUS:  Vendor, Cisco       [26]  53 
    *Sep 20 22:03:26.683: RADIUS:   Cisco AVpair       [1]   47  "ppp-disconnect-cause=Lower Layer disconnected"
    *Sep 20 22:03:26.683: RADIUS:  User-Name           [1]   19  "[email protected]"
    *Sep 20 22:03:26.683: RADIUS:  Acct-Authentic      [45]  6   RADIUS                    [1]
    *Sep 20 22:03:26.683: RADIUS:  Vendor, Cisco       [26]  32 
    *Sep 20 22:03:26.683: RADIUS:   Cisco AVpair       [1]   26  "connect-progress=Call Up"
    *Sep 20 22:03:26.683: RADIUS:  Vendor, Cisco       [26]  31 
    *Sep 20 22:03:26.683: RADIUS:   Cisco AVpair       [1]   25  "nas-tx-speed=1000000000"
    *Sep 20 22:03:26.683: RADIUS:  Vendor, Cisco       [26]  31 
    *Sep 20 22:03:26.683: RADIUS:   Cisco AVpair       [1]   25  "nas-rx-speed=1000000000"
    *Sep 20 22:03:26.683: RADIUS:  Acct-Session-Time   [46]  6   615                      
    *Sep 20 22:03:26.683: RADIUS:  Acct-Input-Octets   [42]  6   1040                     
    *Sep 20 22:03:26.683: RADIUS:  Acct-Output-Octets  [43]  6   1066                     
    *Sep 20 22:03:26.683: RADIUS:  Acct-Input-Packets  [47]  6   78                       
    *Sep 20 22:03:26.684: RADIUS:  Acct-Output-Packets [48]  6   79                       
    *Sep 20 22:03:26.684: RADIUS:  Acct-Terminate-Cause[49]  6   admin-reset               [6]
    *Sep 20 22:03:26.684: RADIUS:  Vendor, Cisco       [26]  39 
    *Sep 20 22:03:26.684: RADIUS:   Cisco AVpair       [1]   33  "disc-cause-ext=Local Admin Disc"
    *Sep 20 22:03:26.684: RADIUS:  Acct-Status-Type    [40]  6   Stop                      [2]
    *Sep 20 22:03:26.684: RADIUS:  NAS-Port-Type       [61]  6   Virtual                   [5]
    *Sep 20 22:03:26.684: RADIUS:  NAS-Port            [5]   6   0                        
    *Sep 20 22:03:26.684: RADIUS:  NAS-Port-Id         [87]  11  "0/0/3/111"
    *Sep 20 22:03:26.684: RADIUS:  Vendor, Cisco       [26]  41 
    *Sep 20 22:03:26.684: RADIUS:   Cisco AVpair       [1]   35  "client-mac-address=6468.0cf7.8546"
    *Sep 20 22:03:26.684: RADIUS:  Connect-Info        [77]  8   "CV_VRF"
    *Sep 20 22:03:26.684: RADIUS:  Service-Type        [6]   6   Framed                    [2]
    *Sep 20 22:03:26.684: RADIUS:  NAS-IP-Address      [4]   6   206.251.40.52            
    *Sep 20 22:03:26.684: RADIUS:  Acct-Delay-Time     [41]  6   0                        
    *Sep 20 22:03:26.684: RADIUS(00000791): Started 60 sec timeout
    *Sep 20 22:03:26.686: [910]PPPoE 1911: Segment (SSS class): UNBOUND
    *Sep 20 22:03:26.686: [910]PPPoE 1911: Vi3 Block vaccess from being freed.
    *Sep 20 22:03:26.687: [910]PPPoE 1911: Segment (SSS class): UNPROVISION
    *Sep 20 22:03:26.687: [910]PPPoE 1911: failed to remove session from switching hash table.
    *Sep 20 22:03:26.694: PPPoE 1911: I PADT  R:6468.0cf7.8546 L:f866.f287.7c83 111 Gi0/0/3.111
    *Sep 20 22:03:26.758: RADIUS: Received from id 1646/71 208.98.188.6:1813, Accounting-response, len 20
    *Sep 20 22:03:26.758: RADIUS:  authenticator E3 A2 A1 EE B0 3F 43 1C - 03 B6 84 A8 20 0D B8 90
    *Sep 20 22:03:32.713: PPPoE 0: I PADI  R:6468.0cf7.8546 L:ffff.ffff.ffff 111 Gi0/0/3.111
    *Sep 20 22:03:32.713:  Service tag: NULL Tag
    *Sep 20 22:03:32.713: PPPoE 0: O PADO, R:f866.f287.7c83 L:6468.0cf7.8546 111 Gi0/0/3.111
    *Sep 20 22:03:32.713:  Service tag: NULL Tag
    *Sep 20 22:03:32.722: PPPoE 0: I PADR  R:6468.0cf7.8546 L:f866.f287.7c83 111 Gi0/0/3.111
    *Sep 20 22:03:32.722:  Service tag: NULL Tag
    *Sep 20 22:03:32.722: PPPoE : encap string prepared
    *Sep 20 22:03:32.722: [911]PPPoE 1912: Access IE handle allocated
    *Sep 20 22:03:32.722: [911]PPPoE 1912: AAA get retrieved attrs
    *Sep 20 22:03:32.722: [911]PPPoE 1912: AAA get nas port details
    *Sep 20 22:03:32.722: [911]PPPoE 1912: Error adjusting nas port format did
    *Sep 20 22:03:32.722: [911]PPPoE 1912: AAA get dynamic attrs
    *Sep 20 22:03:32.722: [911]PPPoE 1912: AAA unique ID 792 allocated
    *Sep 20 22:03:32.722: [911]PPPoE 1912: AAA method list  set
    *Sep 20 22:03:32.722: [911]PPPoE 1912: Service request sent to SSS
    *Sep 20 22:03:32.723: [911]PPPoE 1912: Created, Service: None R:f866.f287.7c83 L:6468.0cf7.8546 111 Gi0/0/3.111
    *Sep 20 22:03:32.723: [911]PPPoE 1912: State NAS_PORT_POLICY_INQUIRY    Event SSS MORE KEYS
    *Sep 20 22:03:32.724: [911]PPPoE 1912: data path set to PPP
    *Sep 20 22:03:32.724: [911]PPPoE 1912: Segment (SSS class): PROVISION
    *Sep 20 22:03:32.724: [911]PPPoE 1912: State PROVISION_PPP    Event SSM PROVISIONED
    *Sep 20 22:03:32.724: [911]PPPoE 1912: O PADS  R:6468.0cf7.8546 L:f866.f287.7c83 Gi0/0/3.111
    *Sep 20 22:03:32.724: [911]PPPoE 1912 <Gi0/0/3.111:111>: Unable to add line attributes from ANCP
    *Sep 20 22:03:32.724: [911]PPPoE 1912: Unable to Add ANCP Line attributes to the PPPoE Authen attributes
    *Sep 20 22:03:33.845: RADIUS/ENCODE(00000792):Orig. component type = PPPoE
    *Sep 20 22:03:33.845: RADIUS: DSL line rate attributes successfully added
    *Sep 20 22:03:33.845: RADIUS(00000792): Config NAS IP: 0.0.0.0
    *Sep 20 22:03:33.845: RADIUS(00000792): Config NAS IPv6: ::
    *Sep 20 22:03:33.845: RADIUS/ENCODE(00000792): acct_session_id: 3411
    *Sep 20 22:03:33.845: RADIUS(00000792): sending
    *Sep 20 22:03:33.845: RADIUS/ENCODE: Best Local IP-Address 206.251.40.52 for Radius-Server 208.98.188.6
    *Sep 20 22:03:33.845: RADIUS(00000792): Sending a IPv4 Radius Packet
    *Sep 20 22:03:33.845: RADIUS(00000792): Send Access-Request to 208.98.188.6:1812 id 1645/56,len 124
    *Sep 20 22:03:33.846: RADIUS:  authenticator 3E 87 16 F9 FF 1A F8 74 - D6 7F 38 C3 F0 98 6E 6F
    *Sep 20 22:03:33.846: RADIUS:  User-Name           [1]   10  "dcdi.net"
    *Sep 20 22:03:33.846: RADIUS:  User-Password       [2]   18  *
    *Sep 20 22:03:33.846: RADIUS:  NAS-Port-Type       [61]  6   Virtual                   [5]
    *Sep 20 22:03:33.846: RADIUS:  NAS-Port            [5]   6   0                        
    *Sep 20 22:03:33.846: RADIUS:  NAS-Port-Id         [87]  11  "0/0/3/111"
    *Sep 20 22:03:33.846: RADIUS:  Vendor, Cisco       [26]  41 
    *Sep 20 22:03:33.846: RADIUS:   Cisco AVpair       [1]   35  "client-mac-address=6468.0cf7.8546"
    *Sep 20 22:03:33.846: RADIUS:  Service-Type        [6]   6   Outbound                  [5]
    *Sep 20 22:03:33.846: RADIUS:  NAS-IP-Address      [4]   6   206.251.40.52            
    *Sep 20 22:03:33.846: RADIUS(00000792): Started 60 sec timeout
    *Sep 20 22:03:34.868: RADIUS: Received from id 1645/56 208.98.188.6:1812, Access-Reject, len 20
    *Sep 20 22:03:34.868: RADIUS:  authenticator 02 CF 53 0A 6A 62 E5 DB - 2E 96 99 E4 09 D8 2E B1
    *Sep 20 22:03:34.868: RADIUS(00000792): Received from id 1645/56
    *Sep 20 22:03:34.869: RADIUS/ENCODE(00000792):Orig. component type = PPPoE
    *Sep 20 22:03:34.869: RADIUS: DSL line rate attributes successfully added
    *Sep 20 22:03:34.869: RADIUS(00000792): Config NAS IP: 0.0.0.0
    *Sep 20 22:03:34.869: RADIUS(00000792): Config NAS IPv6: ::
    *Sep 20 22:03:34.869: RADIUS/ENCODE(00000792): acct_session_id: 3411
    *Sep 20 22:03:34.869: RADIUS(00000792): sending
    *Sep 20 22:03:34.870: RADIUS/ENCODE: Best Local IP-Address 206.251.40.52 for Radius-Server 208.98.188.6
    *Sep 20 22:03:34.870: RADIUS(00000792): Sending a IPv4 Radius Packet
    *Sep 20 22:03:34.870: RADIUS(00000792): Send Access-Request to 208.98.188.6:1812 id 1645/57,len 139
    *Sep 20 22:03:34.870: RADIUS:  authenticator 8D 12 A1 E3 30 52 B0 F5 - 1C CD 8F 60 49 E9 F4 26
    *Sep 20 22:03:34.870: RADIUS:  Framed-Protocol     [7]   6   PPP                       [1]
    *Sep 20 22:03:34.870: RADIUS:  User-Name           [1]   19  "[email protected]"
    *Sep 20 22:03:34.870: RADIUS:  User-Password       [2]   18  *
    *Sep 20 22:03:34.870: RADIUS:  NAS-Port-Type       [61]  6   Virtual                   [5]
    *Sep 20 22:03:34.870: RADIUS:  NAS-Port            [5]   6   0                        
    *Sep 20 22:03:34.870: RADIUS:  NAS-Port-Id         [87]  11  "0/0/3/111"
    *Sep 20 22:03:34.870: RADIUS:  Vendor, Cisco       [26]  41 
    *Sep 20 22:03:34.870: RADIUS:   Cisco AVpair       [1]   35  "client-mac-address=6468.0cf7.8546"
    *Sep 20 22:03:34.870: RADIUS:  Service-Type        [6]   6   Framed                    [2]
    *Sep 20 22:03:34.870: RADIUS:  NAS-IP-Address      [4]   6   206.251.40.52            
    *Sep 20 22:03:34.870: RADIUS(00000792): Started 60 sec timeout
    *Sep 20 22:03:34.894: RADIUS: Received from id 1645/57 208.98.188.6:1812, Access-Accept, len 44
    *Sep 20 22:03:34.894: RADIUS:  authenticator AC 92 A9 7C 1F CB 46 6B - F6 68 03 D8 AF 0B F0 F5
    *Sep 20 22:03:34.894: RADIUS:  Vendor, Cisco       [26]  24 
    *Sep 20 22:03:34.894: RADIUS:   Cisco AVpair       [1]   18  "ip:vrf-id=CV_VRF"
    *Sep 20 22:03:34.894: RADIUS(00000792): Received from id 1645/57
    *Sep 20 22:03:34.902: [911]PPPoE 1912: State LCP_NEGOTIATION    Event SSS CONNECT LOCAL
    *Sep 20 22:03:34.904: [911]PPPoE 1912: Segment (SSS class): UPDATED
    *Sep 20 22:03:34.904: [911]PPPoE 1912: Segment (SSS class): BOUND
    *Sep 20 22:03:34.904: [911]PPPoE 1912: data path set to Virtual Acess
    *Sep 20 22:03:34.905: [911]PPPoE 1912: State LCP_NEGOTIATION    Event SSM UPDATED
    *Sep 20 22:03:34.905: [911]PPPoE 1912: AAA get dynamic attrs
    *Sep 20 22:03:34.906: %LINK-3-UPDOWN: Interface Virtual-Access3, changed state to up
    *Sep 20 22:03:34.907: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
    *Sep 20 22:03:34.907: RADIUS/ENCODE(00000792):Orig. component type = PPPoE
    *Sep 20 22:03:34.907: RADIUS(00000792): Config NAS IP: 0.0.0.0
    *Sep 20 22:03:34.907: RADIUS(00000792): Config NAS IPv6: ::
    *Sep 20 22:03:34.907: RADIUS(00000792): sending
    *Sep 20 22:03:34.907: [911]PPPoE 1912: State PTA_BINDING    Event STATIC BIND RESPONSE
    *Sep 20 22:03:34.907: [911]PPPoE 1912: Connected PTA
    *Sep 20 22:03:34.908: RADIUS/ENCODE: Best Local IP-Address 206.251.40.52 for Radius-Server 208.98.188.6
    *Sep 20 22:03:34.913: RADIUS(00000792): Sending a IPv4 Radius Packet
    *Sep 20 22:03:34.913: RADIUS(00000792): Send Accounting-Request to 208.98.188.6:1813 id 1646/72,len 189
    *Sep 20 22:03:34.913: RADIUS:  authenticator 5B 19 2B 31 5B 6C E7 46 - 5D 69 8D 66 99 13 2E F0
    *Sep 20 22:03:34.913: RADIUS:  Acct-Session-Id     [44]  10  "00000D53"
    *Sep 20 22:03:34.913: RADIUS:  Framed-Protocol     [7]   6   PPP                       [1]
    *Sep 20 22:03:34.913: RADIUS:  User-Name           [1]   19  "[email protected]"
    *Sep 20 22:03:34.913: RADIUS:  Vendor, Cisco       [26]  32 
    *Sep 20 22:03:34.913: RADIUS:   Cisco AVpair       [1]   26  "connect-progress=Call Up"
    *Sep 20 22:03:34.913: RADIUS:  Acct-Authentic      [45]  6   RADIUS                    [1]
    *Sep 20 22:03:34.913: RADIUS:  Acct-Status-Type    [40]  6   Start                     [1]
    *Sep 20 22:03:34.913: RADIUS:  NAS-Port-Type       [61]  6   Virtual                   [5]
    *Sep 20 22:03:34.913: RADIUS:  NAS-Port            [5]   6   0                        
    *Sep 20 22:03:34.913: RADIUS:  NAS-Port-Id         [87]  11  "0/0/3/111"
    *Sep 20 22:03:34.913: RADIUS:  Vendor, Cisco       [26]  41 
    *Sep 20 22:03:34.913: RADIUS:   Cisco AVpair       [1]   35  "client-mac-address=6468.0cf7.8546"
    *Sep 20 22:03:34.913: RADIUS:  Connect-Info        [77]  8   "CV_VRF"
    *Sep 20 22:03:34.913: RADIUS:  Service-Type        [6]   6   Framed                    [2]
    *Sep 20 22:03:34.913: RADIUS:  NAS-IP-Address      [4]   6   206.251.40.52            
    *Sep 20 22:03:34.914: RADIUS:  Acct-Delay-Time     [41]  6   0                        
    *Sep 20 22:03:34.914: RADIUS(00000792): Started 60 sec timeout
    *Sep 20 22:03:34.994: RADIUS: Received from id 1646/72 208.98.188.6:1813, Accounting-response, len 20
    *Sep 20 22:03:34.994: RADIUS:  authenticator 8E E3 AD 24 76 EA C2 53 - AD 0F DD 57 AC 0D F3 BAsho debug
    coreASR1002#sho debugging
    General OS:
      AAA subscriber profile cli debugging is on
    PPPoE:
      PPPoE protocol events debugging is on
      PPPoE protocol errors debugging is on
    Radius protocol debugging is on
    Radius packet protocol debugging is on

    Good Day Manuel,
    "...client is not getting IP address even though the sessions seems to be up. Is this correct?" Correct.
    What I am seeing and suspecting is the problem has to do with 'ip:ip-unnumbered=interface'.
    Trying with the ip:ip-unnumbered=Loopback111 or GigabitEthernet0/0/3.111 (for testing) debugging reports "Session creation failed due to full virtual-access interfaces not being supported...", as soon as the attribute is removed in radius the client authenticates but does not get an IP address. I would rather not use Loopback if possible.
    GE0/0/3.111 is basically the client egress and GE0/0/2.20 is the ingress/router gateway
    Also seeing this debug message, "...Unable to add line attributes from ANCP ... Unable to Add ANCP Line attributes to the PPPoE Authen attributes" which may or may not relate to ip-unnumbered attribute.
    I hope the information isn't too much or confusing, sure appreciate the help.
    debugging with ip:vrf-id=CV_VRF w/o ip:ip-unnumbered
    *Sep 26 17:04:57.395: Vi3 PPP DISC: Lower Layer disconnected
    *Sep 26 17:04:57.396: Vi3 PPP: Sending Acct Event[Down] id[5FB]
    *Sep 26 17:04:57.396: PPP: NET STOP send to AAA.
    *Sep 26 17:04:57.396: Vi3 LCP: O TERMREQ [Open] id 4 len 4
    *Sep 26 17:04:57.396: Vi3 LCP: Event[CLOSE] State[Open to Closing]
    *Sep 26 17:04:57.396: Vi3 PPP: Phase is TERMINATING
    *Sep 26 17:04:57.397: Vi3 PPP: Block vaccess from being freed [0x10]
    *Sep 26 17:04:57.398: Vi3 LCP: Event[DOWN] State[Closing to Initial]
    *Sep 26 17:04:57.399: Vi3 PPP: Unlocked by [0x10] Still Locked by [0x0]
    *Sep 26 17:04:57.399: Vi3 PPP: Free previously blocked vaccess
    *Sep 26 17:04:57.399: Vi3 PPP: Phase is DOWN
    *Sep 26 17:04:57.400: %LINK-3-UPDOWN: Interface Virtual-Access3, changed state to down
    *Sep 26 17:04:57.401: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
    *Sep 26 17:05:03.440: PPP: Alloc Context [38E95CFC]
    *Sep 26 17:05:03.440: ppp514 PPP: Phase is ESTABLISHING
    *Sep 26 17:05:03.440: ppp514 PPP: Using vpn set call direction
    *Sep 26 17:05:03.440: ppp514 PPP: Treating connection as a callin
    *Sep 26 17:05:03.440: ppp514 PPP: Session handle[1D0005EB] Session id[514]
    *Sep 26 17:05:03.440: ppp514 LCP: Event[OPEN] State[Initial to Starting]
    *Sep 26 17:05:03.441: ppp514 PPP LCP: Enter passive mode, state[Stopped]
    *Sep 26 17:05:04.522: ppp514 LCP: I CONFREQ [Stopped] id 180 len 10
    *Sep 26 17:05:04.522: ppp514 LCP:    MagicNumber 0x0669ECAE (0x05060669ECAE)
    *Sep 26 17:05:04.522: ppp514 LCP: O CONFREQ [Stopped] id 1 len 18
    *Sep 26 17:05:04.522: ppp514 LCP:    MRU 1492 (0x010405D4)
    *Sep 26 17:05:04.522: ppp514 LCP:    AuthProto PAP (0x0304C023)
    *Sep 26 17:05:04.522: ppp514 LCP:    MagicNumber 0x6ABFFB9F (0x05066ABFFB9F)
    *Sep 26 17:05:04.522: ppp514 LCP: O CONFACK [Stopped] id 180 len 10
    *Sep 26 17:05:04.522: ppp514 LCP:    MagicNumber 0x0669ECAE (0x05060669ECAE)
    *Sep 26 17:05:04.522: ppp514 LCP: Event[Receive ConfReq+] State[Stopped to ACKsent]
    *Sep 26 17:05:04.525: ppp514 LCP: I CONFACK [ACKsent] id 1 len 18
    *Sep 26 17:05:04.526: ppp514 LCP:    MRU 1492 (0x010405D4)
    *Sep 26 17:05:04.526: ppp514 LCP:    AuthProto PAP (0x0304C023)
    *Sep 26 17:05:04.526: ppp514 LCP:    MagicNumber 0x6ABFFB9F (0x05066ABFFB9F)
    *Sep 26 17:05:04.526: ppp514 LCP: Event[Receive ConfAck] State[ACKsent to Open]
    *Sep 26 17:05:04.528: ppp514 PPP: Queue PAP code[1] id[15]
    *Sep 26 17:05:04.529: ppp514 PPP: Phase is AUTHENTICATING, by this end
    *Sep 26 17:05:04.529: ppp514 PAP: Redirect packet to ppp514
    *Sep 26 17:05:04.529: ppp514 PAP: I AUTH-REQ id 15 len 31 from "[email protected]"
    *Sep 26 17:05:04.529: ppp514 PAP: Authenticating peer [email protected]
    *Sep 26 17:05:04.529: ppp514 PPP: Phase is FORWARDING, Attempting Forward
    *Sep 26 17:05:04.529: ppp514 LCP: State is Open
    *Sep 26 17:05:05.553: ppp514 PPP: Phase is AUTHENTICATING, Unauthenticated User
    *Sep 26 17:05:05.553: ppp514 PPP: Sent PAP LOGIN Request
    *Sep 26 17:05:05.584: ppp514 PPP: Received LOGIN Response PASS
    *Sep 26 17:05:05.584: ppp514 PPP: Phase is FORWARDING, Attempting Forward
    *Sep 26 17:05:05.594: Vi3 PPP: Phase is AUTHENTICATING, Authenticated User
    *Sep 26 17:05:05.594: Vi3 PAP: O AUTH-ACK id 15 len 5
    *Sep 26 17:05:05.595: Vi3 PPP: Phase is UP
    *Sep 26 17:05:05.595: %LINK-3-UPDOWN: Interface Virtual-Access3, changed state to up
    *Sep 26 17:05:05.596: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
    *Sep 26 17:05:05.606: Vi3 IPCP: I CONFREQ [UNKNOWN] id 44 len 22
    *Sep 26 17:05:05.606: Vi3 IPCP:    Address 0.0.0.0 (0x030600000000)
    *Sep 26 17:05:05.606: Vi3 IPCP:    PrimaryDNS 0.0.0.0 (0x810600000000)
    *Sep 26 17:05:05.606: Vi3 IPCP:    SecondaryDNS 0.0.0.0 (0x830600000000)
    *Sep 26 17:05:05.606: Vi3 LCP: O PROTREJ [Open] id 2 len 28 protocol IPCP
    *Sep 26 17:05:05.606: Vi3 LCP: (0x012C0018030600000000810600000000)
    *Sep 26 17:05:05.606: Vi3 LCP: (0x830600000000)
    *Sep 26 17:05:05.607: Vi3 IPV6CP: I CONFREQ [UNKNOWN] id 26 len 14
    *Sep 26 17:05:05.607: Vi3 IPV6CP:    Interface-Id 5421:6C1B:5DCE:401A (0x010A54216C1B5DCE401A)
    *Sep 26 17:05:05.607: Vi3 LCP: O PROTREJ [Open] id 3 len 20 protocol IPV6CP (0x011A0010010A54216C1B5DCE401A) debugging w/o ip:vrf-id=CV_VRF w/o ip:ip-unnumbered
    *Sep 26 17:13:12.424: Vi3 PPP DISC: Lower Layer disconnected
    *Sep 26 17:13:12.424: Vi3 PPP: Sending Acct Event[Down] id[5FE]
    *Sep 26 17:13:12.425: PPP: NET STOP send to AAA.
    *Sep 26 17:13:12.425: Vi3 LCP: O TERMREQ [Open] id 4 len 4
    *Sep 26 17:13:12.425: Vi3 LCP: Event[CLOSE] State[Open to Closing]
    *Sep 26 17:13:12.425: Vi3 PPP: Phase is TERMINATING
    *Sep 26 17:13:12.426: Vi3 PPP: Block vaccess from being freed [0x10]
    *Sep 26 17:13:12.426: Vi3 LCP: Event[DOWN] State[Closing to Initial]
    *Sep 26 17:13:12.428: Vi3 PPP: Unlocked by [0x10] Still Locked by [0x0]
    *Sep 26 17:13:12.428: Vi3 PPP: Free previously blocked vaccess
    *Sep 26 17:13:12.428: Vi3 PPP: Phase is DOWN
    *Sep 26 17:13:12.429: %LINK-3-UPDOWN: Interface Virtual-Access3, changed state to down
    *Sep 26 17:13:12.430: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
    *Sep 26 17:13:18.485: PPP: Alloc Context [38E95CFC]
    *Sep 26 17:13:18.485: ppp515 PPP: Phase is ESTABLISHING
    *Sep 26 17:13:18.486: ppp515 PPP: Using vpn set call direction
    *Sep 26 17:13:18.486: ppp515 PPP: Treating connection as a callin
    *Sep 26 17:13:18.486: ppp515 PPP: Session handle[AC0005EC] Session id[515]
    *Sep 26 17:13:18.486: ppp515 LCP: Event[OPEN] State[Initial to Starting]
    *Sep 26 17:13:18.486: ppp515 PPP LCP: Enter passive mode, state[Stopped]
    *Sep 26 17:13:19.572: ppp515 LCP: I CONFREQ [Stopped] id 181 len 10
    *Sep 26 17:13:19.572: ppp515 LCP:    MagicNumber 0x171E542B (0x0506171E542B)
    *Sep 26 17:13:19.572: ppp515 LCP: O CONFREQ [Stopped] id 1 len 18
    *Sep 26 17:13:19.572: ppp515 LCP:    MRU 1492 (0x010405D4)
    *Sep 26 17:13:19.572: ppp515 LCP:    AuthProto PAP (0x0304C023)
    *Sep 26 17:13:19.572: ppp515 LCP:    MagicNumber 0x6AC78AB2 (0x05066AC78AB2)
    *Sep 26 17:13:19.572: ppp515 LCP: O CONFACK [Stopped] id 181 len 10
    *Sep 26 17:13:19.572: ppp515 LCP:    MagicNumber 0x171E542B (0x0506171E542B)
    *Sep 26 17:13:19.572: ppp515 LCP: Event[Receive ConfReq+] State[Stopped to ACKsent]
    *Sep 26 17:13:19.576: ppp515 LCP: I CONFACK [ACKsent] id 1 len 18
    *Sep 26 17:13:19.576: ppp515 LCP:    MRU 1492 (0x010405D4)
    *Sep 26 17:13:19.576: ppp515 LCP:    AuthProto PAP (0x0304C023)
    *Sep 26 17:13:19.576: ppp515 LCP:    MagicNumber 0x6AC78AB2 (0x05066AC78AB2)
    *Sep 26 17:13:19.576: ppp515 LCP: Event[Receive ConfAck] State[ACKsent to Open]
    *Sep 26 17:13:19.579: ppp515 PPP: Queue PAP code[1] id[16]
    *Sep 26 17:13:19.601: ppp515 PPP: Phase is AUTHENTICATING, by this end
    *Sep 26 17:13:19.601: ppp515 PAP: Redirect packet to ppp515
    *Sep 26 17:13:19.601: ppp515 PAP: I AUTH-REQ id 16 len 31 from "[email protected]"
    *Sep 26 17:13:19.601: ppp515 PAP: Authenticating peer [email protected]
    *Sep 26 17:13:19.601: ppp515 PPP: Phase is FORWARDING, Attempting Forward
    *Sep 26 17:13:19.601: ppp515 LCP: State is Open
    *Sep 26 17:13:20.625: ppp515 PPP: Phase is AUTHENTICATING, Unauthenticated User
    *Sep 26 17:13:20.625: ppp515 PPP: Sent PAP LOGIN Request
    *Sep 26 17:13:20.650: ppp515 PPP: Received LOGIN Response PASS
    *Sep 26 17:13:20.650: ppp515 PPP: Phase is FORWARDING, Attempting Forward
    *Sep 26 17:13:20.657: Vi3 PPP: Phase is AUTHENTICATING, Authenticated User
    *Sep 26 17:13:20.657: Vi3 PAP: O AUTH-ACK id 16 len 5
    *Sep 26 17:13:20.658: Vi3 PPP: Phase is UP
    *Sep 26 17:13:20.658: Vi3 IPCP: Protocol configured, start CP. state[Initial]
    *Sep 26 17:13:20.658: Vi3 IPCP: Event[OPEN] State[Initial to Starting]
    *Sep 26 17:13:20.658: Vi3 IPCP: O CONFREQ [Starting] id 1 len 10
    *Sep 26 17:13:20.658: Vi3 IPCP:    Address 199.200.107.1 (0x0306C7C86B01)
    *Sep 26 17:13:20.658: Vi3 IPCP: Event[UP] State[Starting to REQsent]
    *Sep 26 17:13:20.658: %LINK-3-UPDOWN: Interface Virtual-Access3, changed state to up
    *Sep 26 17:13:20.660: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
    *Sep 26 17:13:20.666: Vi3 IPCP: I CONFREQ [REQsent] id 45 len 22
    *Sep 26 17:13:20.666: Vi3 IPCP:    Address 0.0.0.0 (0x030600000000)
    *Sep 26 17:13:20.666: Vi3 IPCP:    PrimaryDNS 0.0.0.0 (0x810600000000)
    *Sep 26 17:13:20.666: Vi3 IPCP:    SecondaryDNS 0.0.0.0 (0x830600000000)
    *Sep 26 17:13:20.666: Vi3 IPCP AUTHOR: Start.  Her address 0.0.0.0, we want 0.0.0.0
    *Sep 26 17:13:20.666: Vi3 IPCP AUTHOR: Done.  Her address 0.0.0.0, we want 0.0.0.0
    *Sep 26 17:13:20.666: Vi3 IPCP: Pool returned 199.200.107.20
    *Sep 26 17:13:20.667: Vi3 IPCP: O CONFNAK [REQsent] id 45 len 22
    *Sep 26 17:13:20.667: Vi3 IPCP:    Address 199.200.107.20 (0x0306C7C86B14)
    *Sep 26 17:13:20.667: Vi3 IPCP:    PrimaryDNS 208.98.188.81 (0x8106D062BC51)
    *Sep 26 17:13:20.667: Vi3 IPCP:    SecondaryDNS 8.8.8.8 (0x830608080808)
    *Sep 26 17:13:20.667: Vi3 IPCP: Event[Receive ConfReq-] State[REQsent to REQsent]
    *Sep 26 17:13:20.667: Vi3 IPV6CP: I CONFREQ [UNKNOWN] id 27 len 14
    *Sep 26 17:13:20.667: Vi3 IPV6CP:    Interface-Id 096D:2933:E6FE:523D (0x010A096D2933E6FE523D)
    *Sep 26 17:13:20.667: Vi3 LCP: O PROTREJ [Open] id 2 len 20 protocol IPV6CP (0x011B0010010A096D2933E6FE523D)
    *Sep 26 17:13:20.668: Vi3 IPCP: I CONFACK [REQsent] id 1 len 10
    *Sep 26 17:13:20.668: Vi3 IPCP:    Address 199.200.107.1 (0x0306C7C86B01)
    *Sep 26 17:13:20.668: Vi3 IPCP: Event[Receive ConfAck] State[REQsent to ACKrcvd]
    *Sep 26 17:13:20.672: Vi3 IPCP: I CONFREQ [ACKrcvd] id 46 len 22
    *Sep 26 17:13:20.672: Vi3 IPCP:    Address 199.200.107.20 (0x0306C7C86B14)
    *Sep 26 17:13:20.672: Vi3 IPCP:    PrimaryDNS 208.98.188.81 (0x8106D062BC51)
    *Sep 26 17:13:20.672: Vi3 IPCP:    SecondaryDNS 8.8.8.8 (0x830608080808)
    *Sep 26 17:13:20.672: Vi3 IPCP: O CONFACK [ACKrcvd] id 46 len 22
    *Sep 26 17:13:20.672: Vi3 IPCP:    Address 199.200.107.20 (0x0306C7C86B14)
    *Sep 26 17:13:20.672: Vi3 IPCP:    PrimaryDNS 208.98.188.81 (0x8106D062BC51)
    *Sep 26 17:13:20.672: Vi3 IPCP:    SecondaryDNS 8.8.8.8 (0x830608080808)
    *Sep 26 17:13:20.672: Vi3 IPCP: Event[Receive ConfReq+] State[ACKrcvd to Open]
    *Sep 26 17:13:20.689: Vi3 IPCP: State is Open
    *Sep 26 17:13:20.691: %FMANRP_ESS-4-FULLVAI: Session creation failed due to Full Virtual-Access Interfaces not being supported. Check that all applied Virtual-Template and RADIUS features support Virtual-Access sub-interfaces. swidb= 0x41F07370, ifnum= 22
    *Sep 26 17:13:20.691: Vi3 Added to neighbor route AVL tree: topoid 0, address 199.200.107.20
    *Sep 26 17:13:20.691: Vi3 IPCP: Install route to 199.200.107.20
    *Sep 26 17:13:20.693: Vi3 PPP DISC: Lower Layer disconnected
    *Sep 26 17:13:20.693: Vi3 PPP: Sending Acct Event[Down] id[5FF]
    *Sep 26 17:13:20.693: PPP: NET STOP send to AAA.
    *Sep 26 17:13:20.694: Vi3 IPCP: Event[DOWN] State[Open to Starting]
    *Sep 26 17:13:20.694: Vi3 IPCP: Event[CLOSE] State[Starting to Initial]
    *Sep 26 17:13:20.694: Vi3 LCP: O TERMREQ [Open] id 3 len 4
    *Sep 26 17:13:20.694: Vi3 LCP: Event[CLOSE] State[Open to Closing]
    *Sep 26 17:13:20.694: Vi3 PPP: Phase is TERMINATING
    *Sep 26 17:13:20.695: Vi3 PPP: Block vaccess from being freed [0x10]
    *Sep 26 17:13:20.695: Vi3 Deleted neighbor route from AVL tree: topoid 0, address 199.200.107.20
    *Sep 26 17:13:20.695: Vi3 IPCP: Remove route to 199.200.107.20
    *Sep 26 17:13:20.696: Vi3 LCP: Event[DOWN] State[Closing to Initial]
    *Sep 26 17:13:20.696: Vi3 PPP: Unlocked by [0x10] Still Locked by [0x0]
    *Sep 26 17:13:20.696: Vi3 PPP: Free previously blocked vaccess
    *Sep 26 17:13:20.696: Vi3 PPP: Phase is DOWN
    *Sep 26 17:13:20.696: %LINK-3-UPDOWN: Interface Virtual-Access3, changed state to down
    *Sep 26 17:13:20.698: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down

  • What is the Max Nat Session supported on ASR 1002 with ASR1002-5G/K9

    Hello,
    I am going for ASR 1002 With ASR1002-5G/K9 ESP, Can any 1 help me to know how many NAT translation is possible.
    As I got the Datasheet for ASR1000 it say’s 1M translation is Supported by ESP10 but it’s not giving any information regarding ESP5.
    Thanks in advance

    Firewall or NAT: 250,000 sessions and 50,000 sessions-per-sec setup rate
    This is from the datasheet. Pls check.
    Table 3. Cisco ASR 1000 Series 5-Gbps ESP Module Performance and Scaling
    Regards
    Durga Prasad - Datasoft Comnet
    Pls rate helpful posts
    Sent from Cisco Technical Support Android App

  • NAT on ASR-1002

    Hello,
    Does anyone who uses NAT/PAT (nat overload) limit the max number of NAT translations that any one internal IP address can have?  We have had issues where people do port scans and utilise a large majority of our NAT pool.  We are doing NAT on a ASR 1002 with an ESP5.  It can do up to 250,000 NAT translations total and 50,000 new a second.  
    Now I found out that the ASR in a pool will only use the last available IP to do PAT.. The rest of the IP addresses are used for 1-1 NAT.
    Here is our NAT config
    > ip nat translation tcp-timeout 1800
    > ip nat translation udp-timeout 1800
    > ip nat translation max-entries 250000
    > ip nat pool Level3Pool some-ip-address some-ip-address netmask 255.255.255.248
    > ip nat inside source list NAT pool Level3Pool overload
    Any idea about: 
    ip nat settings mode cgn
    ip nat settings mode cgn
    Thanks

    Firewall or NAT: 250,000 sessions and 50,000 sessions-per-sec setup rate
    This is from the datasheet. Pls check.
    Table 3. Cisco ASR 1000 Series 5-Gbps ESP Module Performance and Scaling
    Regards
    Durga Prasad - Datasoft Comnet
    Pls rate helpful posts
    Sent from Cisco Technical Support Android App

  • ASR 1002 current license for LNS router ???

    hi i want to ask about ASR 1002 license for LNS router .
    i want to know how many pppoe session can handle without any license
    i mean wts the current  sessions allowed on the current router
    and wt other options i have to upgrade this router so that it support more sessions and its prices.
    regards

    here is my current router :
    Gateway-ASR1002#sh inventory 
    NAME: "Chassis", DESCR: "Cisco ASR1002 Chassis"
    PID: ASR1002           , VID: V06, SN: FOX1807GBZW
    NAME: "module F0", DESCR: "Cisco ASR1000 Embedded Services Processor, 5Gbps"
    PID: ASR1000-ESP5      , VID: V04, SN: JAE18110AU1
    NAME: "Power Supply Module 0", DESCR: "Cisco ASR1002 AC Power Supply"
    PID: ASR1002-PWR-AC    , VID: V03, SN: ART1804U03P
    NAME: "Power Supply Module 1", DESCR: "Cisco ASR1002 AC Power Supply"
    PID: ASR1002-PWR-AC    , VID: V03, SN: ART1804U05H
    NAME: "module 0", DESCR: "Cisco ASR1002 SPA Interface Processor 10"
    PID: ASR1002-SIP10     , VID:    , SN:            
    NAME: "SPA subslot 0/0", DESCR: "4-port Gigabit Ethernet Shared Port Adapter"
    PID: 4XGE-BUILT-IN     , VID:    , SN:            
    NAME: "subslot 0/0 transceiver 0", DESCR: "GE T"
    PID: SFP-GE-T          , VID:     , SN: MTC1229019N     
    NAME: "subslot 0/0 transceiver 1", DESCR: "GE T"
    PID: SFP-GE-T          , VID:     , SN: MTC1231005A     
    NAME: "subslot 0/0 transceiver 2", DESCR: "GE T"
    PID: SFP-GE-T          , VID:     , SN: MTC1229019M     
    NAME: "module R0", DESCR: "Cisco ASR1002 Route Processor 1"
    PID: ASR1002-RP1       , VID: V06, SN: JAE18110F7G
    Gateway-ASR1002#

  • ASR 1002 ACL object-group for ZBFW

    Hey guys,
    Quick question. I just want to know if anyone has experience configuring object-groups for ACLs on the ASR 1002. I am trying to so this on ours to consolidate a large ACL we have. It only works if I specifically use the protocols within the configuration. If I add a service object-group to match my protocols it doesn't match. The same configuration works on a 2811 router.
    I have a TAC case open and Cisco is telling me that object-groups are not supported on the ASRs but I have a hard time believing them if the commands clearly exist.
    If anyone has experience in this please let me know.
    Thanks,
    Elton
    Sent from Cisco Technical Support iPhone App

    Elton,
    "Hi Joe,
    Support will start in 3.9S (Q1CY2013).  Thanks. 
    Cheers,
    /Mani"
    From:
    Ask The Expert: Introduction to Cisco ASR 1000 Series Aggregation Services Routers

  • ASR 1002 license

    Hello,
    we got  a new cisco ASR 1002 ,does it require a license to work as BRAS?? 
    Thnx

    Yes, it does.
    The feature licenses for ASR1K can be viewed at Table 2 on the URL http://www.cisco.com/en/US/prod/collateral/routers/ps9343/product_bulletin_c25-448292.html
    You would need a license to enable broadband (FLASR1-BB-RTU) and another license with the appropriate number of sessions.
    Cheers

  • CoPP on ASR 1002-X

    Hello,
    I'm trying to create CoPP on ASR 1002-X. I've created several base classess for different kinds of traffic I'm expecting to see.
    This works fine, OSPF, HSRP, ARP, BFD packets are going to their respective classes. But there are still some packets that fall to class-default.
    I've used "debug platform software infrastructure punt packet" to find out what packets are punted to the CPU.
    There is one that I'm not sure how to deal with. It's called "RP <-> QFP keepalive". Should I include it in CoPP? If so, how can I match it?
    Thanks.

    Hi Blaz,
    In the debugs, I still see Framed-Compression attribute in the access-accept sent from radius:
    Mar 19 11:22:37.737: RADIUS:  Framed-Compression  [13]  6   None                      [0]
    Changing the compression from "Van-Jacobsen-TCP-IP" to 'None' is not enough. You need to remove the Framed-Compression attribute completely from the radius profile for the subscriber.
    Could you try that?
    Regards

  • ASR 1002 Router doing multiple VRFs

    I have an ASR 1002 router with Three VRFs coming into it. The first 2 VRFs are just terminating on the ASR with L3 sub interfaces. So no big deal with them. The third one is a VRF that needs to terminate on a separate router. The ASR that needs to split out this 3rd VRF is not allowed to have an IP address for it. So it just needs to forward off this as L2 to a separate physical port and then terminates on a different router. 
    So my question is what is the best way to accomplish this on the ASR? Could I setup a pseudo wire setup or is there an easier way to just split off this as separate VLAN to the other physical interface? 

    Hi
    You could try with bridging. Something like this
    Interface bvi 1
    no ip address
    interface gig0
    bridge-gropup 1
    interface gig1
    bridge-group 1
    /Mikael

  • ASR 1002 Monitor

    I have an ASR 1002 that I have placed the following config on:
    monitor session 1 type local
     source interface Gi0/0/2 , Gi0/3/0
     destination interface Gi0/3/4
    I am not receiving any traffic on the destination port, is this really supported on the ASR?

    Hello,
    Please see below.
    http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/lanswitch/configuration/xe-3s/asr1000/lanswitch-xe-3s-asr1000-book/lnsw-conf-erspan.html#GUID-152D9875-169B-461F-A34B-ABAABD0C1FF8
    "The monitor session span-session-number type local command is not supported on Cisco ASR 1000 Series Routers."
             ===You may though configure ERSPAN to work as a local SPAN===
    *  Make sure that both the source session and destination session have the same erspan-id
    *  Use one locally configured IPv4 address to configure the "ip address" and "origin ip address" in source session and "ip address" in destination session
           Example snip: Monitor interface Gig0/0/0 traffic, and then send out through interface Gig0/0/1..
    monitor session 10 type erspan-source
    source interface Gi0/0/0
    destination
    erspan-id 10
    ip address 10.10.10.1
    origin ip address 10.10.10.1
    monitor session 20 type erspan-destination
    destination interface Gi0/0/1
    source
    erspan-id 10
    ip address 10.10.10.1

  • ASR 1002 doesnt support "media type sfp " command ?!!

    hi all ,
    i have a new ASR 1002 , i want to use  interfaces as fiber not as rj45
    when i go to interface mode , i cant see "media type sfp " !!!!
    does that mesn it dont support fiber ???
    or i need to upgrade my IOS ??
    ====================
    here is my version
    Gateway-ASR1002#sh version 
    Cisco IOS XE Software, Version 03.11.00.S - Standard Support Release
    Cisco IOS Software, ASR1000 Software (PPC_LINUX_IOSD-ADVENTERPRISEK9-M), Version 15.4(1)S, RELEASE SOFTWARE (fc2)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2013 by Cisco Systems, Inc.
    Compiled Tue 19-Nov-13 20:12 by mcpre
    Cisco IOS-XE software, Copyright (c) 2005-2013 by cisco Systems, Inc.
    All rights reserved.  Certain components of Cisco IOS-XE software are
    licensed under the GNU General Public License ("GPL") Version 2.0.  The
    software code licensed under GPL Version 2.0 is free software that comes
    with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
    GPL code under the terms of GPL Version 2.0.  For more details, see the
    documentation or "License Notice" file accompanying the IOS-XE software,
    or the applicable URL provided on the flyer accompanying the IOS-XE
    software.
    ROM: IOS-XE ROMMON
    Gateway-ASR1002 uptime is 1 day, 2 hours, 19 minutes
    Uptime for this control processor is 1 day, 2 hours, 23 minutes
    System returned to ROM by reload at 19:55:40 UTC Thu Apr 3 2014
    System image file is "bootflash:/asr1000rp1-adventerprisek9.03.11.00.S.154-1.S-std.bi"
    Last reload reason: PowerOn
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    cisco ASR1002 (2RU) processor with 1662145K/6147K bytes of memory.
    Processor board ID FOX1807GBZW
    4 Gigabit Ethernet interfaces
    32768K bytes of non-volatile configuration memory.
    4194304K bytes of physical memory.
    7757823K bytes of eUSB flash at bootflash:.
    ===============================

    ASR 1000 Series Router
    ASR1001
    ASR1002
    ASR1002-F
    ASR1002-X
    SFP-GE-T
    XE 2.1
    SFP-GE-S
    SFP-GE-L
    SFP-GE-Z
    CWDM SFP
    DWDM SFP
    XE 2.1
    XE 2.1
    GLC-BX-D
    GLC-BX-U
    XE 2.5
    XE 2.5
    GLC-SX-MMD
    GLC-LH-SMD
    GLC-ZX-SMD
    XE 3.4S
    XE 3.4S
    GLC-EX-SMD
    XE 3.5S
    XE 3.5S
    ASR 1000 platform with SPA cards
    Software support on the ASR 1000 modular platforms is determined by the platform on which the SPA is installed. Refer to the SPA release notes for the correct software release.
    http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/configuration/ASR1000/ASRspasw.pdf

  • Asr 1002 license options

    Hi all,
    I'm trying to get clarification with the licensing surrounding the ASR units.
    Which features of the ASR 1002 are enforced by PAK file or similar?  I'm going to be doing some testing in the Lab with a couple of borrowed units and I just need to know what I'll be able to do.
    From my undertanding and upgrade from 5G to 10G would require a PAK file for upgrade and so to would a move from IP Base to enterprise or adv IP services.  The remainder of the upgrades (for example enabling broadband services) are honor based. 
    If someone could confirm this that would be great.
    Thanks,
    Jonathan

    Yes, it does.
    The feature licenses for ASR1K can be viewed at Table 2 on the URL http://www.cisco.com/en/US/prod/collateral/routers/ps9343/product_bulletin_c25-448292.html
    You would need a license to enable broadband (FLASR1-BB-RTU) and another license with the appropriate number of sessions.
    Cheers

  • ASR 1002 Netflow performance

    Is there a good way to estimate the impact of enabling netflow on our 2 gateway routers? They are both ASR 1002s both with 150mb connections. 
    Both usually run around 10% cpu load and 55% memory.
    Thanks!

    One of the main problems is that I have seen is unknown unicast and  multast is supposed to be replicated and sent out all circuits in the  same VPN ID but I have not had any success with this. All link local  multicast stops at the PE. I had it setup with a 1002 as a hub and five 1001 spokes in a lab test rack. From the XE feature notes it looks like it wwas tested on an ASR 903 which apparently has more featers than a 1K. You cannot do TP tunnels on a 1K but they are supported on the 903.
    http://www.cisco.com/en/US/docs/ios/ios_xe/3/release/notes/asr1k_feats_important_notes_35s.html
    Pretty much all of the good stuff that you see in the 3S config guide lets get you get to 90 percent of what you may want to do but the last 10 percent of the exampls are all from a 903.
    http://www.cisco.com/en/US/docs/ios-xml/ios/mp_l2_vpns/configuration/xe-3s/mp-l2-vpns-xe-3s-book.html

Maybe you are looking for

  • Can we perform the backup in local disk

    Hu Gurus, how can we perform the Backup in Local HDD please guide me Cheers Gopal Rao

  • Crystal Reports 2011 INS00140 error

    I have been unsuccessful in installing Crystal Reports 2011.  After I enter my name, company name, and key, it will pop up with the error after 30 to 45 seconds of waiting.  I am uncertain if I have to uninstall Crystal Reports 2008.  I have spoken t

  • How do you change the topic name in Jeopardy?

    I'm in a trial version of 8, and can't seem to be able to edit the topic's name. Is this possible?

  • Embed ActiveX in Java GUI

    i need embed Internet Explorer or Flash Macromedia into mi application make in java

  • Panasonic Lumix DMC-FZ50 RAW

    Anyone know the right hack to the raw.plist file, and how to apply it properly in order to get FZ50's RAW files to work with Aperture? I've tried what I found for the LX1 and what I've learned of making other cameras work. But, the closest I've come