ASR 1002 inter-chassis redundancy

Can anyone tell me which licence is required to create inter-chassis redundancy between 2 ASR 1002 routers?
I don't need NAT/ Firewall features. I want redundancy only for ip data. As i have read on Cisco sites it is mentioned that we require licence for NAT/Firewall features. If i don't require these features is there any need for any particular licence or not?
Regards,
Mukesh Kumar
Network Engineer
Spooster IT Services

Hello Leo Laohoo
I know Rahul Chhabra. But my answer is not there where you told me to go.
As you told him to use HSRP, we don't want to use this protocol. Because this is configured on the interface level. If we will use this protocol we need the same number of ip addresses as the interfaces we are having on the routers. Thats why we prefer Inter-chassis Hardware Redundancy between 2 ASR 1002 routers, in this case we require only two IP addresses for the both the routers.
Now i want to know that we want to enable only routing on the ASR routers, for this do we need any license or not. If yes then which one license we have to purchase?
If not then please tell me the link from where have you seen that we don't require any link.
Regards,
Mukesh Kumar
Network Engineer
Spooster IT Services

Similar Messages

Inter chassis Redundancy License

Hi,
Could anyone tell me that I am having 2 Cisco ASR 1002 and I want to do Inter chassis Redundancy between these devices.
As per Cisco doc I found that Inter chassis Redundancy is available for ASR1002 but it is for Firewall/NAT configuration Replication.
And it need Cisco IOS XE 3.7S for inter chassis Redundancy and we need this license FLASR1-FWNAT-RED(=) for Replication of Firewall/NAT configuration.
These are links where I found this:
Inter chassis Redundancy on ASR 1002
http://www.cisco.com/c/en/us/td/docs/routers/asr1000/configuration/guide/sbcu/2_xe/sbcu_2_xe_book/sbc_interHA.pdf
Firewall/nat replication
http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nat/configuration/xe-3s/asr1000/nat-xe-3s-asr1k-book/iadnat-stateful-int-chass.html
but I want to confirm that can it will replicate the IP data traffic as we doesn't have any Firewall/nat configuration or any other traffic except IP data.
OR
If I purchase this license mentioned before than it will replicate the Data configuration or not.
we also have to run VRFs, BGP and QOS also on these devices.
Please let me know if anybody know this.
Thanks & Regards
Rahul Chhabra
Network Engineer
Spooster IT Services

Hello Leo Laohoo
I know Rahul Chhabra. But my answer is not there where you told me to go.
As you told him to use HSRP, we don't want to use this protocol. Because this is configured on the interface level. If we will use this protocol we need the same number of ip addresses as the interfaces we are having on the routers. Thats why we prefer Inter-chassis Hardware Redundancy between 2 ASR 1002 routers, in this case we require only two IP addresses for the both the routers.
Now i want to know that we want to enable only routing on the ASR routers, for this do we need any license or not. If yes then which one license we have to purchase?
If not then please tell me the link from where have you seen that we don't require any link.
Regards,
Mukesh Kumar
Network Engineer
Spooster IT Services

ASR 1002 current license for LNS router ???

hi i want to ask about ASR 1002 license for LNS router .
i want to know how many pppoe session can handle without any license
i mean wts the current sessions allowed on the current router
and wt other options i have to upgrade this router so that it support more sessions and its prices.
regards

here is my current router :
Gateway-ASR1002#sh inventory
NAME: "Chassis", DESCR: "Cisco ASR1002 Chassis"
PID: ASR1002 , VID: V06, SN: FOX1807GBZW
NAME: "module F0", DESCR: "Cisco ASR1000 Embedded Services Processor, 5Gbps"
PID: ASR1000-ESP5 , VID: V04, SN: JAE18110AU1
NAME: "Power Supply Module 0", DESCR: "Cisco ASR1002 AC Power Supply"
PID: ASR1002-PWR-AC , VID: V03, SN: ART1804U03P
NAME: "Power Supply Module 1", DESCR: "Cisco ASR1002 AC Power Supply"
PID: ASR1002-PWR-AC , VID: V03, SN: ART1804U05H
NAME: "module 0", DESCR: "Cisco ASR1002 SPA Interface Processor 10"
PID: ASR1002-SIP10 , VID: , SN:
NAME: "SPA subslot 0/0", DESCR: "4-port Gigabit Ethernet Shared Port Adapter"
PID: 4XGE-BUILT-IN , VID: , SN:
NAME: "subslot 0/0 transceiver 0", DESCR: "GE T"
PID: SFP-GE-T , VID: , SN: MTC1229019N
NAME: "subslot 0/0 transceiver 1", DESCR: "GE T"
PID: SFP-GE-T , VID: , SN: MTC1231005A
NAME: "subslot 0/0 transceiver 2", DESCR: "GE T"
PID: SFP-GE-T , VID: , SN: MTC1229019M
NAME: "module R0", DESCR: "Cisco ASR1002 Route Processor 1"
PID: ASR1002-RP1 , VID: V06, SN: JAE18110F7G
Gateway-ASR1002#

ASR 1002

Hello all,
I have 1 Cisco ASR 1002 configured as a normal edge router connecting to ISP.
When i used ftp service from PC outside to servers inside, the FTP service ran normally in the morning but it is slower by afternoon and till the end of the working day, client PC couldn't work anymore
So, i restarted ASR 1002 and it did work well again
The next day, i replaced ASR 1002 with Cisco router 2801, configured the same extractly. And there's not problem anymore.
Then, I tried ASR 1002 and it's in trouble again. Now, i have to use 2801.....
I have checked log and see:
*Feb 19 14:10:58.143: %QFPOOR-4-LOWRSRC_PERCENT: F0: cpp_ha: QFP 0 DRAM resource low - 97 percent depleted
*Feb 19 14:36:22.271: %QFPOOR-4-LOWRSRC_PERCENT: F0: cpp_ha: QFP 0 DRAM resource low - 98 percent depleted
*Feb 19 15:02:16.368: %QFPOOR-4-LOWRSRC_PERCENT: F0: cpp_ha: QFP 0 IRAM resource low - 99 percent depleted
So i did use command:
show platform hardware qfp active infra exmem statistics user:
Type: Name: IRAM, QFP: 0
Allocations Bytes-Alloc Bytes-Total User-Name
1            115200       115712       CPP_FIA
1902         125440704    126597120    NAT
Type: Name: GLOBAL, QFP: 0
Allocations Bytes-Alloc Bytes-Total User-Name
7            14544        18432        P/I
7            270696       274432       CEF
1            512          1024         B2B HA
1            1138256      1138688      QM RM
1            16384        16384        Qm 16
1            524288       524288       TCAM
3            4210688      4210688      ING_EGR_UIDB
1            835584       835584       ING EGR INPUT CHUNK_Config_0
1            16384        16384        ING EGR INPUT CHUNK_Sm_Name_0
1            32768        32768        ING EGR INPUT CHUNK_Lg_Name_0
1            770048       770048       ING EGR OUTPUT CHUNK_Config_0
1            16384        16384        ING EGR OUTPUT CHUNK_Sm_Name_0
1            32768        32768        ING EGR OUTPUT CHUNK_Lg_Name_0
1            16384        16384        ING EGR OUTPUT CHUNK_Queue_0
1            16384        16384        ING-EGR_IfMap_0
4            25856        28672        GIC
1            1048576      1048576      PLU Mgr_CEF_0_0
1            1048576      1048576      PLU Mgr_CEF_0_3
1            1048576      1048576      PLU Mgr_CEF_0_7
1            1572864      1572864      PLU Mgr_CEF_0_8
1            1048576      1048576      PLU Mgr_PLU_GLOBAL_0_0
1            1048576      1048576      PLU Mgr_PLU_GLOBAL_0_1
1            786432       786432       PLU Mgr_PLU_GLOBAL_0_2
1            1048576      1048576      PLU Mgr_PLU_GLOBAL_0_3
1            1310720      1310720      PLU Mgr_PLU_GLOBAL_0_4
1            786432       786432       PLU Mgr_PLU_GLOBAL_0_5
1            917504       917504       PLU Mgr_PLU_GLOBAL_0_6
1            1048576      1048576      PLU Mgr_PLU_GLOBAL_0_7
1            1572864      1572864      PLU Mgr_PLU_GLOBAL_0_8
21           5223968      5235712      ALG
3            4400         7168         LI
1            64           1024         cpp_li_sbs_client
Type: Name: GLOBAL, QFP: 0
Allocations Bytes-Alloc Bytes-Total User-Name
5            34836        38912        SSLVPN
1            2048         2048         SMI
1            40           1024         cpp_smi_sbs_client
1            6528         7168         cpp_pbr_sbs_client
3            1540836      1543168      TD
787          64665040     65135616     NAT
3            24000        24576        TUNNEL
1            4384         5120         ERSPAN
1            112          1024         cpp_erspan_sbs_client
12           627008       630784       ESS
2            32           2048         ICMP
1            32000        32768        cpp_icmp_sb_chunk
1            524288       524288       QoS 1024
1            4096         4096         SPAMARMOT
1            32768        32768        ethernet
1            16384        16384        PALCI CLIENT
3            8064         9216         cpp_punt_sbs_client
1            320          1024         punt path chunk 0
1            32000        32768        punt subblock chunk
21           8064         21504        punt policer chunk
17           515984       529408       PKTLOG
1            512          1024         queue info chunk 0
1            16           1024         CPP IPHC
7            1286432      1288192      IPFRAG
1            16000        16384        cpp_ipfrag_sb_chunk
10           26048        34816        cpp_ipfrag_sbs_client
1            32000        32768        cpp_ipreass_sb_chunk
1            16000        16384        cpp_ipreass_cur_dgram_cnt_chunk
1            64000        64512        cpp_ipvfr_sb_chunk
1            64000        64512        cpp_ipv6reass_sb_chunk
1            6528         7168         sbs_cef
1            16000        16384        cpp_tunnel_subblock
Type: Name: GLOBAL, QFP: 0
Allocations Bytes-Alloc Bytes-Total User-Name
1            32000        32768        cpp_ipv4_tunnel_hash_elem
1            4096         4096         NAT SB
1            16384        16384        cpp_pbr_action_chunk
I found : NAT is the feature that hold most of the memory. What can i do now

On the Cisco ASR 1000 Series Routers, IOS runs as one of many processes within the operating system. This is different than on traditional Cisco IOS, where all processes are run within Cisco IOS.
This architecture allows for software redundancy opportunities that are not available on other platforms that run Cisco IOS software. Specifically, a standby IOS process can be available on the same Route Processor as the active IOS process. This standby IOS process can be switched to in the event of an IOS failure, and can also be used to upgrade subpackage software in some scenarios as the standby IOS process in an ISSU upgrade.
Following Table shows Software Redundancy Overview:
Router
Support for Two IOS Processes on Same Route Processor
Support for a Second IOS Process on Standby Route Processor
Explanation
Cisco ASR 1001 Router1
Yes
N/A
The Cisco ASR 1001 Router only supports one RP, so dual IOS processes run on the lone RP.
Cisco ASR 1002 Router
Yes
N/A
The Cisco ASR 1002 Router only supports one RP, so dual IOS processes run on the lone RP.
Cisco ASR 1004 Router
Yes
N/A
The Cisco ASR 1004 Router only supports one RP, so dual IOS processes run on the lone RP.
Cisco ASR 1006 Router
No
Yes
The Cisco ASR 1006 Router supports a second Route Processor, so the second IOS process can only run on the standby Route Processor.
For more details check:
Software Redundancy on the Cisco ASR 1000 Series Routers
-Thanks
Vinod
**Encourage Contributors. RATE Them.**

What is the Max Nat Session supported on ASR 1002 with ASR1002-5G/K9

Hello,
I am going for ASR 1002 With ASR1002-5G/K9 ESP, Can any 1 help me to know how many NAT translation is possible.
As I got the Datasheet for ASR1000 it say’s 1M translation is Supported by ESP10 but it’s not giving any information regarding ESP5.
Thanks in advance

Firewall or NAT: 250,000 sessions and 50,000 sessions-per-sec setup rate
This is from the datasheet. Pls check.
Table 3. Cisco ASR 1000 Series 5-Gbps ESP Module Performance and Scaling
Regards
Durga Prasad - Datasoft Comnet
Pls rate helpful posts
Sent from Cisco Technical Support Android App

Migrate PPPoE/Virtual-Interface from 7206VXR to ASR 1002

Good Day,
I have been attempting to migrate services from an existing 7206VXR to a recently purchased ASR1002 and could use some help.
My mistake in assuming that the config would be similar to 7206VXR, but there are changes - mainly VRF and cisco-avpair attributes that need added to radius.
Our lab test, with the below ASR config will allow the user to authenticate successfully but does not assign IP address.
User Status
User is online
Last Connection
2012-09-21 10:27:47
Online Time
1 hours, 4 minutes, 15 seconds
Server (NAS)
206.251.40.52 (MAC: )
User Workstation
(MAC: )
User Upload
6.5 Kb
User Download
6.51 Kb
ID
HotSpot
Username
IP Address
Start Time
Stop Time
Total Time
Upload (Bytes)
Download (Bytes)
Termination
NAS IP Address
7837056
[email protected]
2012-09-21 10:27:47
1 hours, 4 minutes, 15 seconds
6.5 Kb
6.51 Kb
206.251.40.52
I have also tried assigning a static IP to the CPE, however the CPE cannot see 199.200.107.1.
No doubt the problem is something simple I appreciate any help or suggestions.
Radius Reply Attributes
Cisco-AVPair += ip:vrf-id=CV_VRF
Cisco-AVPair += ip:ip-unnumbered=Loopback 111 (generates unsupported sub-interface errors when used)
7206VXR Config-
aaa new-model
aaa authentication login default group radius
aaa authentication login con none
aaa authentication login vty line local
aaa authentication login localauth local
aaa authentication ppp default if-needed group radius
aaa authorization network default group radius
aaa authorization network noauth none
aaa accounting update periodic 5
aaa accounting network default
action-type start-stop
group radius
aaa accounting system default
action-type start-stop
group radius
bba-group pppoe 156
virtual-template 156
sessions per-vc limit 65000
sessions per-mac limit 65000
sessions per-vlan limit 65000
interface Loopback0
ip address 10.1.1.3 255.255.255.255
ip ospf network point-to-point
interface GigabitEthernet0/1
no ip address
no ip redirects
duplex full
speed 1000
media-type rj45
no negotiation auto
no cdp enable
interface GigabitEthernet0/1.20
description ROUTER GATEWAY
encapsulation dot1Q 20
ip address 206.251.40.51 255.255.255.248
no cdp enable
interface GigabitEthernet0/2
no ip address
no ip redirects
duplex full
speed 1000
media-type rj45
no negotiation auto
no cdp enable
interface GigabitEthernet0/2.156
encapsulation dot1Q 156
ip address 199.30.185.1 255.255.255.0 secondary
ip address 199.30.186.1 255.255.255.0 secondary
ip address 199.30.187.1 255.255.255.0 secondary
ip address 199.30.184.1 255.255.255.0
pppoe enable group 156
no cdp enable
interface Virtual-Template156
ip unnumbered GigabitEthernet0/2.156
no ip redirects
no ip route-cache cef
peer default ip address pool IP_POOL156
ppp mtu adaptive
ppp authentication pap
ip local pool IP_POOL156 199.30.184.2 199.30.184.254
ip local pool IP_POOL156 199.30.185.2 199.30.185.254
ip local pool IP_POOL156 199.30.186.2 199.30.186.254
ip local pool IP_POOL156 199.30.187.2 199.30.187.254
no ip forward-protocol nd
no ip http server
no ip http secure-server
ip route 199.30.184.0 255.255.252.0 Null0 200
ip prefix-list AS19045 seq 10 permit 199.30.184.0/22
ip radius source-interface GigabitEthernet0/1.20
radius-server host x.x.x.x auth-port 1812 acct-port 1813
radius-server retransmit 1
radius-server timeout 60
radius-server key ********
radius-server vsa send accounting
radius-server vsa send authentication
ASR 1002 Config (attempt)
aaa new-model
aaa group server radius AAA_CV_VRF
server 208.98.188.6 auth-port 1812 acct-port 1813
aaa authentication login default group AAA_CV_VRF
aaa authentication login con none
aaa authentication login vty line local
aaa authentication login localauth local
aaa authentication ppp default if-needed group AAA_CV_VRF
aaa authorization network default group AAA_CV_VRF
aaa authorization network noauth none
aaa accounting update newinfo periodic 60
aaa accounting network default start-stop group AAA_CV_VRF
aaa accounting connection default start-stop group AAA_CV_VRF
aaa accounting system default
action-type start-stop
group AAA_CV_VRF
aaa accounting resource default start-stop group AAA_CV_VRF
aaa session-id common
aaa policy interface-config allow-subinterface
clock timezone MST -7 0
clock summer-time MST recurring
no ip source-route
ip vrf CV_VRF
rd 1:1
virtual-profile if-needed
multilink bundle-name authenticated
bba-group pppoe 111
description TEST
virtual-template 111
sessions per-vc limit 65000
sessions per-mac limit 65000
sessions per-vlan limit 65000
sessions auto cleanup
interface Loopback0
ip address 10.1.1.4 255.255.255.255
ip ospf network point-to-point
interface Loopback111
description TEST
ip vrf forwarding CV_VRF
ip address 199.200.107.1 255.255.255.0
interface GigabitEthernet0/0/2
no ip address
no ip redirects
no negotiation auto
interface GigabitEthernet0/0/2.20
description ROUTER GATEWAY
encapsulation dot1Q 20
ip address 206.251.40.52 255.255.255.248
interface GigabitEthernet0/0/3
no ip address
no ip redirects
no negotiation auto
interface GigabitEthernet0/0/3.111
encapsulation dot1Q 111
ip vrf forwarding CV_VRF
no ip proxy-arp
pppoe enable group 111
interface Virtual-Template111
ip unnumbered GigabitEthernet0/0/3.111
no ip redirects
no ip route-cache cef
peer default ip address pool IP_POOL111
ppp mtu adaptive
ppp authentication pap
router ospf 19045
router-id 10.1.1.4
network 10.1.1.4 0.0.0.0 area 0.0.0.0
network 199.200.107.0 0.0.0.255 area 0.0.0.0
network 206.251.40.48 0.0.0.7 area 0.0.0.0
router bgp 19045
bgp log-neighbor-changes
network 199.200.104.0 mask 255.255.252.0
network 206.251.40.0 mask 255.255.248.0
neighbor 10.1.1.1 remote-as 19045
neighbor 10.1.1.1 description IBGP_PEER_ASR
neighbor 10.1.1.1 update-source Loopback0
neighbor 10.1.1.1 next-hop-self
ip local pool IP_POOL111 199.200.107.2 199.200.107.254
no ip forward-protocol nd
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 206.251.40.49
ip route 199.200.104.0 255.255.252.0 Null0 200
ip prefix-list AS19045 seq 10 permit 199.200.104.0/22
ip radius source-interface GigabitEthernet0/0/2.20
radius-server host x.x.x.x auth-port 1812 acct-port 1813 key ********
radius-server retransmit 1
radius-server timeout 60
radius-server vsa send accounting
radius-server vsa send authentication
Debug Info
*Sep 20 22:03:26.677: [910]PPPoE 1911: AAA get dynamic attrs
*Sep 20 22:03:26.678: [910]PPPoE 1911: O PADT R:6468.0cf7.8546 L:f866.f287.7c83 Gi0/0/3.111
*Sep 20 22:03:26.678: [910]PPPoE 1911: Destroying R:6468.0cf7.8546 L:f866.f287.7c83 111 Gi0/0/3.111
*Sep 20 22:03:26.678: PPPoE: Returning Vaccess Virtual-Access3
*Sep 20 22:03:26.679: [910]PPPoE 1911: AAA get dynamic attrs
*Sep 20 22:03:26.679: [910]PPPoE 1911: AAA account stopped
*Sep 20 22:03:26.679: RADIUS/ENCODE(00000791):Orig. component type = PPPoE
*Sep 20 22:03:26.679: RADIUS(00000791): Config NAS IP: 0.0.0.0
*Sep 20 22:03:26.679: RADIUS(00000791): Config NAS IPv6: ::
*Sep 20 22:03:26.679: RADIUS(00000791): sending
*Sep 20 22:03:26.682: %LINK-3-UPDOWN: Interface Virtual-Access3, changed state to down
*Sep 20 22:03:26.682: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
*Sep 20 22:03:26.683: RADIUS/ENCODE: Best Local IP-Address 206.251.40.52 for Radius-Server 208.98.188.6
*Sep 20 22:03:26.683: RADIUS(00000791): Sending a IPv4 Radius Packet
*Sep 20 22:03:26.683: RADIUS(00000791): Send Accounting-Request to 208.98.188.6:1813 id 1646/71,len 379
*Sep 20 22:03:26.683: RADIUS: authenticator A6 50 A4 C3 2A 30 AB DA - 59 BF E8 75 8A 91 AA 9B
*Sep 20 22:03:26.683: RADIUS: Acct-Session-Id     [44] 10 "00000D51"
*Sep 20 22:03:26.683: RADIUS: Framed-Protocol     [7]   6   PPP                       [1]
*Sep 20 22:03:26.683: RADIUS: Vendor, Cisco       [26] 53
*Sep 20 22:03:26.683: RADIUS:   Cisco AVpair       [1]   47 "ppp-disconnect-cause=Lower Layer disconnected"
*Sep 20 22:03:26.683: RADIUS: User-Name           [1]   19 "[email protected]"
*Sep 20 22:03:26.683: RADIUS: Acct-Authentic      [45] 6   RADIUS                    [1]
*Sep 20 22:03:26.683: RADIUS: Vendor, Cisco       [26] 32
*Sep 20 22:03:26.683: RADIUS:   Cisco AVpair       [1]   26 "connect-progress=Call Up"
*Sep 20 22:03:26.683: RADIUS: Vendor, Cisco       [26] 31
*Sep 20 22:03:26.683: RADIUS:   Cisco AVpair       [1]   25 "nas-tx-speed=1000000000"
*Sep 20 22:03:26.683: RADIUS: Vendor, Cisco       [26] 31
*Sep 20 22:03:26.683: RADIUS:   Cisco AVpair       [1]   25 "nas-rx-speed=1000000000"
*Sep 20 22:03:26.683: RADIUS: Acct-Session-Time   [46] 6   615
*Sep 20 22:03:26.683: RADIUS: Acct-Input-Octets   [42] 6   1040
*Sep 20 22:03:26.683: RADIUS: Acct-Output-Octets [43] 6   1066
*Sep 20 22:03:26.683: RADIUS: Acct-Input-Packets [47] 6   78
*Sep 20 22:03:26.684: RADIUS: Acct-Output-Packets [48] 6   79
*Sep 20 22:03:26.684: RADIUS: Acct-Terminate-Cause[49] 6   admin-reset               [6]
*Sep 20 22:03:26.684: RADIUS: Vendor, Cisco       [26] 39
*Sep 20 22:03:26.684: RADIUS:   Cisco AVpair       [1]   33 "disc-cause-ext=Local Admin Disc"
*Sep 20 22:03:26.684: RADIUS: Acct-Status-Type    [40] 6   Stop                      [2]
*Sep 20 22:03:26.684: RADIUS: NAS-Port-Type       [61] 6   Virtual                   [5]
*Sep 20 22:03:26.684: RADIUS: NAS-Port            [5]   6   0
*Sep 20 22:03:26.684: RADIUS: NAS-Port-Id         [87] 11 "0/0/3/111"
*Sep 20 22:03:26.684: RADIUS: Vendor, Cisco       [26] 41
*Sep 20 22:03:26.684: RADIUS:   Cisco AVpair       [1]   35 "client-mac-address=6468.0cf7.8546"
*Sep 20 22:03:26.684: RADIUS: Connect-Info        [77] 8   "CV_VRF"
*Sep 20 22:03:26.684: RADIUS: Service-Type        [6]   6   Framed                    [2]
*Sep 20 22:03:26.684: RADIUS: NAS-IP-Address      [4]   6   206.251.40.52
*Sep 20 22:03:26.684: RADIUS: Acct-Delay-Time     [41] 6   0
*Sep 20 22:03:26.684: RADIUS(00000791): Started 60 sec timeout
*Sep 20 22:03:26.686: [910]PPPoE 1911: Segment (SSS class): UNBOUND
*Sep 20 22:03:26.686: [910]PPPoE 1911: Vi3 Block vaccess from being freed.
*Sep 20 22:03:26.687: [910]PPPoE 1911: Segment (SSS class): UNPROVISION
*Sep 20 22:03:26.687: [910]PPPoE 1911: failed to remove session from switching hash table.
*Sep 20 22:03:26.694: PPPoE 1911: I PADT R:6468.0cf7.8546 L:f866.f287.7c83 111 Gi0/0/3.111
*Sep 20 22:03:26.758: RADIUS: Received from id 1646/71 208.98.188.6:1813, Accounting-response, len 20
*Sep 20 22:03:26.758: RADIUS: authenticator E3 A2 A1 EE B0 3F 43 1C - 03 B6 84 A8 20 0D B8 90
*Sep 20 22:03:32.713: PPPoE 0: I PADI R:6468.0cf7.8546 L:ffff.ffff.ffff 111 Gi0/0/3.111
*Sep 20 22:03:32.713: Service tag: NULL Tag
*Sep 20 22:03:32.713: PPPoE 0: O PADO, R:f866.f287.7c83 L:6468.0cf7.8546 111 Gi0/0/3.111
*Sep 20 22:03:32.713: Service tag: NULL Tag
*Sep 20 22:03:32.722: PPPoE 0: I PADR R:6468.0cf7.8546 L:f866.f287.7c83 111 Gi0/0/3.111
*Sep 20 22:03:32.722: Service tag: NULL Tag
*Sep 20 22:03:32.722: PPPoE : encap string prepared
*Sep 20 22:03:32.722: [911]PPPoE 1912: Access IE handle allocated
*Sep 20 22:03:32.722: [911]PPPoE 1912: AAA get retrieved attrs
*Sep 20 22:03:32.722: [911]PPPoE 1912: AAA get nas port details
*Sep 20 22:03:32.722: [911]PPPoE 1912: Error adjusting nas port format did
*Sep 20 22:03:32.722: [911]PPPoE 1912: AAA get dynamic attrs
*Sep 20 22:03:32.722: [911]PPPoE 1912: AAA unique ID 792 allocated
*Sep 20 22:03:32.722: [911]PPPoE 1912: AAA method list set
*Sep 20 22:03:32.722: [911]PPPoE 1912: Service request sent to SSS
*Sep 20 22:03:32.723: [911]PPPoE 1912: Created, Service: None R:f866.f287.7c83 L:6468.0cf7.8546 111 Gi0/0/3.111
*Sep 20 22:03:32.723: [911]PPPoE 1912: State NAS_PORT_POLICY_INQUIRY    Event SSS MORE KEYS
*Sep 20 22:03:32.724: [911]PPPoE 1912: data path set to PPP
*Sep 20 22:03:32.724: [911]PPPoE 1912: Segment (SSS class): PROVISION
*Sep 20 22:03:32.724: [911]PPPoE 1912: State PROVISION_PPP    Event SSM PROVISIONED
*Sep 20 22:03:32.724: [911]PPPoE 1912: O PADS R:6468.0cf7.8546 L:f866.f287.7c83 Gi0/0/3.111
*Sep 20 22:03:32.724: [911]PPPoE 1912 <Gi0/0/3.111:111>: Unable to add line attributes from ANCP
*Sep 20 22:03:32.724: [911]PPPoE 1912: Unable to Add ANCP Line attributes to the PPPoE Authen attributes
*Sep 20 22:03:33.845: RADIUS/ENCODE(00000792):Orig. component type = PPPoE
*Sep 20 22:03:33.845: RADIUS: DSL line rate attributes successfully added
*Sep 20 22:03:33.845: RADIUS(00000792): Config NAS IP: 0.0.0.0
*Sep 20 22:03:33.845: RADIUS(00000792): Config NAS IPv6: ::
*Sep 20 22:03:33.845: RADIUS/ENCODE(00000792): acct_session_id: 3411
*Sep 20 22:03:33.845: RADIUS(00000792): sending
*Sep 20 22:03:33.845: RADIUS/ENCODE: Best Local IP-Address 206.251.40.52 for Radius-Server 208.98.188.6
*Sep 20 22:03:33.845: RADIUS(00000792): Sending a IPv4 Radius Packet
*Sep 20 22:03:33.845: RADIUS(00000792): Send Access-Request to 208.98.188.6:1812 id 1645/56,len 124
*Sep 20 22:03:33.846: RADIUS: authenticator 3E 87 16 F9 FF 1A F8 74 - D6 7F 38 C3 F0 98 6E 6F
*Sep 20 22:03:33.846: RADIUS: User-Name           [1]   10 "dcdi.net"
*Sep 20 22:03:33.846: RADIUS: User-Password       [2]   18 *
*Sep 20 22:03:33.846: RADIUS: NAS-Port-Type       [61] 6   Virtual                   [5]
*Sep 20 22:03:33.846: RADIUS: NAS-Port            [5]   6   0
*Sep 20 22:03:33.846: RADIUS: NAS-Port-Id         [87] 11 "0/0/3/111"
*Sep 20 22:03:33.846: RADIUS: Vendor, Cisco       [26] 41
*Sep 20 22:03:33.846: RADIUS:   Cisco AVpair       [1]   35 "client-mac-address=6468.0cf7.8546"
*Sep 20 22:03:33.846: RADIUS: Service-Type        [6]   6   Outbound                  [5]
*Sep 20 22:03:33.846: RADIUS: NAS-IP-Address      [4]   6   206.251.40.52
*Sep 20 22:03:33.846: RADIUS(00000792): Started 60 sec timeout
*Sep 20 22:03:34.868: RADIUS: Received from id 1645/56 208.98.188.6:1812, Access-Reject, len 20
*Sep 20 22:03:34.868: RADIUS: authenticator 02 CF 53 0A 6A 62 E5 DB - 2E 96 99 E4 09 D8 2E B1
*Sep 20 22:03:34.868: RADIUS(00000792): Received from id 1645/56
*Sep 20 22:03:34.869: RADIUS/ENCODE(00000792):Orig. component type = PPPoE
*Sep 20 22:03:34.869: RADIUS: DSL line rate attributes successfully added
*Sep 20 22:03:34.869: RADIUS(00000792): Config NAS IP: 0.0.0.0
*Sep 20 22:03:34.869: RADIUS(00000792): Config NAS IPv6: ::
*Sep 20 22:03:34.869: RADIUS/ENCODE(00000792): acct_session_id: 3411
*Sep 20 22:03:34.869: RADIUS(00000792): sending
*Sep 20 22:03:34.870: RADIUS/ENCODE: Best Local IP-Address 206.251.40.52 for Radius-Server 208.98.188.6
*Sep 20 22:03:34.870: RADIUS(00000792): Sending a IPv4 Radius Packet
*Sep 20 22:03:34.870: RADIUS(00000792): Send Access-Request to 208.98.188.6:1812 id 1645/57,len 139
*Sep 20 22:03:34.870: RADIUS: authenticator 8D 12 A1 E3 30 52 B0 F5 - 1C CD 8F 60 49 E9 F4 26
*Sep 20 22:03:34.870: RADIUS: Framed-Protocol     [7]   6   PPP                       [1]
*Sep 20 22:03:34.870: RADIUS: User-Name           [1]   19 "[email protected]"
*Sep 20 22:03:34.870: RADIUS: User-Password       [2]   18 *
*Sep 20 22:03:34.870: RADIUS: NAS-Port-Type       [61] 6   Virtual                   [5]
*Sep 20 22:03:34.870: RADIUS: NAS-Port            [5]   6   0
*Sep 20 22:03:34.870: RADIUS: NAS-Port-Id         [87] 11 "0/0/3/111"
*Sep 20 22:03:34.870: RADIUS: Vendor, Cisco       [26] 41
*Sep 20 22:03:34.870: RADIUS:   Cisco AVpair       [1]   35 "client-mac-address=6468.0cf7.8546"
*Sep 20 22:03:34.870: RADIUS: Service-Type        [6]   6   Framed                    [2]
*Sep 20 22:03:34.870: RADIUS: NAS-IP-Address      [4]   6   206.251.40.52
*Sep 20 22:03:34.870: RADIUS(00000792): Started 60 sec timeout
*Sep 20 22:03:34.894: RADIUS: Received from id 1645/57 208.98.188.6:1812, Access-Accept, len 44
*Sep 20 22:03:34.894: RADIUS: authenticator AC 92 A9 7C 1F CB 46 6B - F6 68 03 D8 AF 0B F0 F5
*Sep 20 22:03:34.894: RADIUS: Vendor, Cisco       [26] 24
*Sep 20 22:03:34.894: RADIUS:   Cisco AVpair       [1]   18 "ip:vrf-id=CV_VRF"
*Sep 20 22:03:34.894: RADIUS(00000792): Received from id 1645/57
*Sep 20 22:03:34.902: [911]PPPoE 1912: State LCP_NEGOTIATION    Event SSS CONNECT LOCAL
*Sep 20 22:03:34.904: [911]PPPoE 1912: Segment (SSS class): UPDATED
*Sep 20 22:03:34.904: [911]PPPoE 1912: Segment (SSS class): BOUND
*Sep 20 22:03:34.904: [911]PPPoE 1912: data path set to Virtual Acess
*Sep 20 22:03:34.905: [911]PPPoE 1912: State LCP_NEGOTIATION    Event SSM UPDATED
*Sep 20 22:03:34.905: [911]PPPoE 1912: AAA get dynamic attrs
*Sep 20 22:03:34.906: %LINK-3-UPDOWN: Interface Virtual-Access3, changed state to up
*Sep 20 22:03:34.907: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
*Sep 20 22:03:34.907: RADIUS/ENCODE(00000792):Orig. component type = PPPoE
*Sep 20 22:03:34.907: RADIUS(00000792): Config NAS IP: 0.0.0.0
*Sep 20 22:03:34.907: RADIUS(00000792): Config NAS IPv6: ::
*Sep 20 22:03:34.907: RADIUS(00000792): sending
*Sep 20 22:03:34.907: [911]PPPoE 1912: State PTA_BINDING    Event STATIC BIND RESPONSE
*Sep 20 22:03:34.907: [911]PPPoE 1912: Connected PTA
*Sep 20 22:03:34.908: RADIUS/ENCODE: Best Local IP-Address 206.251.40.52 for Radius-Server 208.98.188.6
*Sep 20 22:03:34.913: RADIUS(00000792): Sending a IPv4 Radius Packet
*Sep 20 22:03:34.913: RADIUS(00000792): Send Accounting-Request to 208.98.188.6:1813 id 1646/72,len 189
*Sep 20 22:03:34.913: RADIUS: authenticator 5B 19 2B 31 5B 6C E7 46 - 5D 69 8D 66 99 13 2E F0
*Sep 20 22:03:34.913: RADIUS: Acct-Session-Id     [44] 10 "00000D53"
*Sep 20 22:03:34.913: RADIUS: Framed-Protocol     [7]   6   PPP                       [1]
*Sep 20 22:03:34.913: RADIUS: User-Name           [1]   19 "[email protected]"
*Sep 20 22:03:34.913: RADIUS: Vendor, Cisco       [26] 32
*Sep 20 22:03:34.913: RADIUS:   Cisco AVpair       [1]   26 "connect-progress=Call Up"
*Sep 20 22:03:34.913: RADIUS: Acct-Authentic      [45] 6   RADIUS                    [1]
*Sep 20 22:03:34.913: RADIUS: Acct-Status-Type    [40] 6   Start                     [1]
*Sep 20 22:03:34.913: RADIUS: NAS-Port-Type       [61] 6   Virtual                   [5]
*Sep 20 22:03:34.913: RADIUS: NAS-Port            [5]   6   0
*Sep 20 22:03:34.913: RADIUS: NAS-Port-Id         [87] 11 "0/0/3/111"
*Sep 20 22:03:34.913: RADIUS: Vendor, Cisco       [26] 41
*Sep 20 22:03:34.913: RADIUS:   Cisco AVpair       [1]   35 "client-mac-address=6468.0cf7.8546"
*Sep 20 22:03:34.913: RADIUS: Connect-Info        [77] 8   "CV_VRF"
*Sep 20 22:03:34.913: RADIUS: Service-Type        [6]   6   Framed                    [2]
*Sep 20 22:03:34.913: RADIUS: NAS-IP-Address      [4]   6   206.251.40.52
*Sep 20 22:03:34.914: RADIUS: Acct-Delay-Time     [41] 6   0
*Sep 20 22:03:34.914: RADIUS(00000792): Started 60 sec timeout
*Sep 20 22:03:34.994: RADIUS: Received from id 1646/72 208.98.188.6:1813, Accounting-response, len 20
*Sep 20 22:03:34.994: RADIUS: authenticator 8E E3 AD 24 76 EA C2 53 - AD 0F DD 57 AC 0D F3 BAsho debug
coreASR1002#sho debugging
General OS:
AAA subscriber profile cli debugging is on
PPPoE:
PPPoE protocol events debugging is on
PPPoE protocol errors debugging is on
Radius protocol debugging is on
Radius packet protocol debugging is on

Good Day Manuel,
"...client is not getting IP address even though the sessions seems to be up. Is this correct?" Correct.
What I am seeing and suspecting is the problem has to do with 'ip:ip-unnumbered=interface'.
Trying with the ip:ip-unnumbered=Loopback111 or GigabitEthernet0/0/3.111 (for testing) debugging reports "Session creation failed due to full virtual-access interfaces not being supported...", as soon as the attribute is removed in radius the client authenticates but does not get an IP address. I would rather not use Loopback if possible.
GE0/0/3.111 is basically the client egress and GE0/0/2.20 is the ingress/router gateway
Also seeing this debug message, "...Unable to add line attributes from ANCP ... Unable to Add ANCP Line attributes to the PPPoE Authen attributes" which may or may not relate to ip-unnumbered attribute.
I hope the information isn't too much or confusing, sure appreciate the help.
debugging with ip:vrf-id=CV_VRF w/o ip:ip-unnumbered
*Sep 26 17:04:57.395: Vi3 PPP DISC: Lower Layer disconnected
*Sep 26 17:04:57.396: Vi3 PPP: Sending Acct Event[Down] id[5FB]
*Sep 26 17:04:57.396: PPP: NET STOP send to AAA.
*Sep 26 17:04:57.396: Vi3 LCP: O TERMREQ [Open] id 4 len 4
*Sep 26 17:04:57.396: Vi3 LCP: Event[CLOSE] State[Open to Closing]
*Sep 26 17:04:57.396: Vi3 PPP: Phase is TERMINATING
*Sep 26 17:04:57.397: Vi3 PPP: Block vaccess from being freed [0x10]
*Sep 26 17:04:57.398: Vi3 LCP: Event[DOWN] State[Closing to Initial]
*Sep 26 17:04:57.399: Vi3 PPP: Unlocked by [0x10] Still Locked by [0x0]
*Sep 26 17:04:57.399: Vi3 PPP: Free previously blocked vaccess
*Sep 26 17:04:57.399: Vi3 PPP: Phase is DOWN
*Sep 26 17:04:57.400: %LINK-3-UPDOWN: Interface Virtual-Access3, changed state to down
*Sep 26 17:04:57.401: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
*Sep 26 17:05:03.440: PPP: Alloc Context [38E95CFC]
*Sep 26 17:05:03.440: ppp514 PPP: Phase is ESTABLISHING
*Sep 26 17:05:03.440: ppp514 PPP: Using vpn set call direction
*Sep 26 17:05:03.440: ppp514 PPP: Treating connection as a callin
*Sep 26 17:05:03.440: ppp514 PPP: Session handle[1D0005EB] Session id[514]
*Sep 26 17:05:03.440: ppp514 LCP: Event[OPEN] State[Initial to Starting]
*Sep 26 17:05:03.441: ppp514 PPP LCP: Enter passive mode, state[Stopped]
*Sep 26 17:05:04.522: ppp514 LCP: I CONFREQ [Stopped] id 180 len 10
*Sep 26 17:05:04.522: ppp514 LCP:    MagicNumber 0x0669ECAE (0x05060669ECAE)
*Sep 26 17:05:04.522: ppp514 LCP: O CONFREQ [Stopped] id 1 len 18
*Sep 26 17:05:04.522: ppp514 LCP:    MRU 1492 (0x010405D4)
*Sep 26 17:05:04.522: ppp514 LCP:    AuthProto PAP (0x0304C023)
*Sep 26 17:05:04.522: ppp514 LCP:    MagicNumber 0x6ABFFB9F (0x05066ABFFB9F)
*Sep 26 17:05:04.522: ppp514 LCP: O CONFACK [Stopped] id 180 len 10
*Sep 26 17:05:04.522: ppp514 LCP:    MagicNumber 0x0669ECAE (0x05060669ECAE)
*Sep 26 17:05:04.522: ppp514 LCP: Event[Receive ConfReq+] State[Stopped to ACKsent]
*Sep 26 17:05:04.525: ppp514 LCP: I CONFACK [ACKsent] id 1 len 18
*Sep 26 17:05:04.526: ppp514 LCP:    MRU 1492 (0x010405D4)
*Sep 26 17:05:04.526: ppp514 LCP:    AuthProto PAP (0x0304C023)
*Sep 26 17:05:04.526: ppp514 LCP:    MagicNumber 0x6ABFFB9F (0x05066ABFFB9F)
*Sep 26 17:05:04.526: ppp514 LCP: Event[Receive ConfAck] State[ACKsent to Open]
*Sep 26 17:05:04.528: ppp514 PPP: Queue PAP code[1] id[15]
*Sep 26 17:05:04.529: ppp514 PPP: Phase is AUTHENTICATING, by this end
*Sep 26 17:05:04.529: ppp514 PAP: Redirect packet to ppp514
*Sep 26 17:05:04.529: ppp514 PAP: I AUTH-REQ id 15 len 31 from "[email protected]"
*Sep 26 17:05:04.529: ppp514 PAP: Authenticating peer [email protected]
*Sep 26 17:05:04.529: ppp514 PPP: Phase is FORWARDING, Attempting Forward
*Sep 26 17:05:04.529: ppp514 LCP: State is Open
*Sep 26 17:05:05.553: ppp514 PPP: Phase is AUTHENTICATING, Unauthenticated User
*Sep 26 17:05:05.553: ppp514 PPP: Sent PAP LOGIN Request
*Sep 26 17:05:05.584: ppp514 PPP: Received LOGIN Response PASS
*Sep 26 17:05:05.584: ppp514 PPP: Phase is FORWARDING, Attempting Forward
*Sep 26 17:05:05.594: Vi3 PPP: Phase is AUTHENTICATING, Authenticated User
*Sep 26 17:05:05.594: Vi3 PAP: O AUTH-ACK id 15 len 5
*Sep 26 17:05:05.595: Vi3 PPP: Phase is UP
*Sep 26 17:05:05.595: %LINK-3-UPDOWN: Interface Virtual-Access3, changed state to up
*Sep 26 17:05:05.596: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
*Sep 26 17:05:05.606: Vi3 IPCP: I CONFREQ [UNKNOWN] id 44 len 22
*Sep 26 17:05:05.606: Vi3 IPCP:    Address 0.0.0.0 (0x030600000000)
*Sep 26 17:05:05.606: Vi3 IPCP:    PrimaryDNS 0.0.0.0 (0x810600000000)
*Sep 26 17:05:05.606: Vi3 IPCP:    SecondaryDNS 0.0.0.0 (0x830600000000)
*Sep 26 17:05:05.606: Vi3 LCP: O PROTREJ [Open] id 2 len 28 protocol IPCP
*Sep 26 17:05:05.606: Vi3 LCP: (0x012C0018030600000000810600000000)
*Sep 26 17:05:05.606: Vi3 LCP: (0x830600000000)
*Sep 26 17:05:05.607: Vi3 IPV6CP: I CONFREQ [UNKNOWN] id 26 len 14
*Sep 26 17:05:05.607: Vi3 IPV6CP:    Interface-Id 5421:6C1B:5DCE:401A (0x010A54216C1B5DCE401A)
*Sep 26 17:05:05.607: Vi3 LCP: O PROTREJ [Open] id 3 len 20 protocol IPV6CP (0x011A0010010A54216C1B5DCE401A) debugging w/o ip:vrf-id=CV_VRF w/o ip:ip-unnumbered
*Sep 26 17:13:12.424: Vi3 PPP DISC: Lower Layer disconnected
*Sep 26 17:13:12.424: Vi3 PPP: Sending Acct Event[Down] id[5FE]
*Sep 26 17:13:12.425: PPP: NET STOP send to AAA.
*Sep 26 17:13:12.425: Vi3 LCP: O TERMREQ [Open] id 4 len 4
*Sep 26 17:13:12.425: Vi3 LCP: Event[CLOSE] State[Open to Closing]
*Sep 26 17:13:12.425: Vi3 PPP: Phase is TERMINATING
*Sep 26 17:13:12.426: Vi3 PPP: Block vaccess from being freed [0x10]
*Sep 26 17:13:12.426: Vi3 LCP: Event[DOWN] State[Closing to Initial]
*Sep 26 17:13:12.428: Vi3 PPP: Unlocked by [0x10] Still Locked by [0x0]
*Sep 26 17:13:12.428: Vi3 PPP: Free previously blocked vaccess
*Sep 26 17:13:12.428: Vi3 PPP: Phase is DOWN
*Sep 26 17:13:12.429: %LINK-3-UPDOWN: Interface Virtual-Access3, changed state to down
*Sep 26 17:13:12.430: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
*Sep 26 17:13:18.485: PPP: Alloc Context [38E95CFC]
*Sep 26 17:13:18.485: ppp515 PPP: Phase is ESTABLISHING
*Sep 26 17:13:18.486: ppp515 PPP: Using vpn set call direction
*Sep 26 17:13:18.486: ppp515 PPP: Treating connection as a callin
*Sep 26 17:13:18.486: ppp515 PPP: Session handle[AC0005EC] Session id[515]
*Sep 26 17:13:18.486: ppp515 LCP: Event[OPEN] State[Initial to Starting]
*Sep 26 17:13:18.486: ppp515 PPP LCP: Enter passive mode, state[Stopped]
*Sep 26 17:13:19.572: ppp515 LCP: I CONFREQ [Stopped] id 181 len 10
*Sep 26 17:13:19.572: ppp515 LCP:    MagicNumber 0x171E542B (0x0506171E542B)
*Sep 26 17:13:19.572: ppp515 LCP: O CONFREQ [Stopped] id 1 len 18
*Sep 26 17:13:19.572: ppp515 LCP:    MRU 1492 (0x010405D4)
*Sep 26 17:13:19.572: ppp515 LCP:    AuthProto PAP (0x0304C023)
*Sep 26 17:13:19.572: ppp515 LCP:    MagicNumber 0x6AC78AB2 (0x05066AC78AB2)
*Sep 26 17:13:19.572: ppp515 LCP: O CONFACK [Stopped] id 181 len 10
*Sep 26 17:13:19.572: ppp515 LCP:    MagicNumber 0x171E542B (0x0506171E542B)
*Sep 26 17:13:19.572: ppp515 LCP: Event[Receive ConfReq+] State[Stopped to ACKsent]
*Sep 26 17:13:19.576: ppp515 LCP: I CONFACK [ACKsent] id 1 len 18
*Sep 26 17:13:19.576: ppp515 LCP:    MRU 1492 (0x010405D4)
*Sep 26 17:13:19.576: ppp515 LCP:    AuthProto PAP (0x0304C023)
*Sep 26 17:13:19.576: ppp515 LCP:    MagicNumber 0x6AC78AB2 (0x05066AC78AB2)
*Sep 26 17:13:19.576: ppp515 LCP: Event[Receive ConfAck] State[ACKsent to Open]
*Sep 26 17:13:19.579: ppp515 PPP: Queue PAP code[1] id[16]
*Sep 26 17:13:19.601: ppp515 PPP: Phase is AUTHENTICATING, by this end
*Sep 26 17:13:19.601: ppp515 PAP: Redirect packet to ppp515
*Sep 26 17:13:19.601: ppp515 PAP: I AUTH-REQ id 16 len 31 from "[email protected]"
*Sep 26 17:13:19.601: ppp515 PAP: Authenticating peer [email protected]
*Sep 26 17:13:19.601: ppp515 PPP: Phase is FORWARDING, Attempting Forward
*Sep 26 17:13:19.601: ppp515 LCP: State is Open
*Sep 26 17:13:20.625: ppp515 PPP: Phase is AUTHENTICATING, Unauthenticated User
*Sep 26 17:13:20.625: ppp515 PPP: Sent PAP LOGIN Request
*Sep 26 17:13:20.650: ppp515 PPP: Received LOGIN Response PASS
*Sep 26 17:13:20.650: ppp515 PPP: Phase is FORWARDING, Attempting Forward
*Sep 26 17:13:20.657: Vi3 PPP: Phase is AUTHENTICATING, Authenticated User
*Sep 26 17:13:20.657: Vi3 PAP: O AUTH-ACK id 16 len 5
*Sep 26 17:13:20.658: Vi3 PPP: Phase is UP
*Sep 26 17:13:20.658: Vi3 IPCP: Protocol configured, start CP. state[Initial]
*Sep 26 17:13:20.658: Vi3 IPCP: Event[OPEN] State[Initial to Starting]
*Sep 26 17:13:20.658: Vi3 IPCP: O CONFREQ [Starting] id 1 len 10
*Sep 26 17:13:20.658: Vi3 IPCP:    Address 199.200.107.1 (0x0306C7C86B01)
*Sep 26 17:13:20.658: Vi3 IPCP: Event[UP] State[Starting to REQsent]
*Sep 26 17:13:20.658: %LINK-3-UPDOWN: Interface Virtual-Access3, changed state to up
*Sep 26 17:13:20.660: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
*Sep 26 17:13:20.666: Vi3 IPCP: I CONFREQ [REQsent] id 45 len 22
*Sep 26 17:13:20.666: Vi3 IPCP:    Address 0.0.0.0 (0x030600000000)
*Sep 26 17:13:20.666: Vi3 IPCP:    PrimaryDNS 0.0.0.0 (0x810600000000)
*Sep 26 17:13:20.666: Vi3 IPCP:    SecondaryDNS 0.0.0.0 (0x830600000000)
*Sep 26 17:13:20.666: Vi3 IPCP AUTHOR: Start. Her address 0.0.0.0, we want 0.0.0.0
*Sep 26 17:13:20.666: Vi3 IPCP AUTHOR: Done. Her address 0.0.0.0, we want 0.0.0.0
*Sep 26 17:13:20.666: Vi3 IPCP: Pool returned 199.200.107.20
*Sep 26 17:13:20.667: Vi3 IPCP: O CONFNAK [REQsent] id 45 len 22
*Sep 26 17:13:20.667: Vi3 IPCP:    Address 199.200.107.20 (0x0306C7C86B14)
*Sep 26 17:13:20.667: Vi3 IPCP:    PrimaryDNS 208.98.188.81 (0x8106D062BC51)
*Sep 26 17:13:20.667: Vi3 IPCP:    SecondaryDNS 8.8.8.8 (0x830608080808)
*Sep 26 17:13:20.667: Vi3 IPCP: Event[Receive ConfReq-] State[REQsent to REQsent]
*Sep 26 17:13:20.667: Vi3 IPV6CP: I CONFREQ [UNKNOWN] id 27 len 14
*Sep 26 17:13:20.667: Vi3 IPV6CP:    Interface-Id 096D:2933:E6FE:523D (0x010A096D2933E6FE523D)
*Sep 26 17:13:20.667: Vi3 LCP: O PROTREJ [Open] id 2 len 20 protocol IPV6CP (0x011B0010010A096D2933E6FE523D)
*Sep 26 17:13:20.668: Vi3 IPCP: I CONFACK [REQsent] id 1 len 10
*Sep 26 17:13:20.668: Vi3 IPCP:    Address 199.200.107.1 (0x0306C7C86B01)
*Sep 26 17:13:20.668: Vi3 IPCP: Event[Receive ConfAck] State[REQsent to ACKrcvd]
*Sep 26 17:13:20.672: Vi3 IPCP: I CONFREQ [ACKrcvd] id 46 len 22
*Sep 26 17:13:20.672: Vi3 IPCP:    Address 199.200.107.20 (0x0306C7C86B14)
*Sep 26 17:13:20.672: Vi3 IPCP:    PrimaryDNS 208.98.188.81 (0x8106D062BC51)
*Sep 26 17:13:20.672: Vi3 IPCP:    SecondaryDNS 8.8.8.8 (0x830608080808)
*Sep 26 17:13:20.672: Vi3 IPCP: O CONFACK [ACKrcvd] id 46 len 22
*Sep 26 17:13:20.672: Vi3 IPCP:    Address 199.200.107.20 (0x0306C7C86B14)
*Sep 26 17:13:20.672: Vi3 IPCP:    PrimaryDNS 208.98.188.81 (0x8106D062BC51)
*Sep 26 17:13:20.672: Vi3 IPCP:    SecondaryDNS 8.8.8.8 (0x830608080808)
*Sep 26 17:13:20.672: Vi3 IPCP: Event[Receive ConfReq+] State[ACKrcvd to Open]
*Sep 26 17:13:20.689: Vi3 IPCP: State is Open
*Sep 26 17:13:20.691: %FMANRP_ESS-4-FULLVAI: Session creation failed due to Full Virtual-Access Interfaces not being supported. Check that all applied Virtual-Template and RADIUS features support Virtual-Access sub-interfaces. swidb= 0x41F07370, ifnum= 22
*Sep 26 17:13:20.691: Vi3 Added to neighbor route AVL tree: topoid 0, address 199.200.107.20
*Sep 26 17:13:20.691: Vi3 IPCP: Install route to 199.200.107.20
*Sep 26 17:13:20.693: Vi3 PPP DISC: Lower Layer disconnected
*Sep 26 17:13:20.693: Vi3 PPP: Sending Acct Event[Down] id[5FF]
*Sep 26 17:13:20.693: PPP: NET STOP send to AAA.
*Sep 26 17:13:20.694: Vi3 IPCP: Event[DOWN] State[Open to Starting]
*Sep 26 17:13:20.694: Vi3 IPCP: Event[CLOSE] State[Starting to Initial]
*Sep 26 17:13:20.694: Vi3 LCP: O TERMREQ [Open] id 3 len 4
*Sep 26 17:13:20.694: Vi3 LCP: Event[CLOSE] State[Open to Closing]
*Sep 26 17:13:20.694: Vi3 PPP: Phase is TERMINATING
*Sep 26 17:13:20.695: Vi3 PPP: Block vaccess from being freed [0x10]
*Sep 26 17:13:20.695: Vi3 Deleted neighbor route from AVL tree: topoid 0, address 199.200.107.20
*Sep 26 17:13:20.695: Vi3 IPCP: Remove route to 199.200.107.20
*Sep 26 17:13:20.696: Vi3 LCP: Event[DOWN] State[Closing to Initial]
*Sep 26 17:13:20.696: Vi3 PPP: Unlocked by [0x10] Still Locked by [0x0]
*Sep 26 17:13:20.696: Vi3 PPP: Free previously blocked vaccess
*Sep 26 17:13:20.696: Vi3 PPP: Phase is DOWN
*Sep 26 17:13:20.696: %LINK-3-UPDOWN: Interface Virtual-Access3, changed state to down
*Sep 26 17:13:20.698: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down

NAT on ASR-1002

Hello,
Does anyone who uses NAT/PAT (nat overload) limit the max number of NAT translations that any one internal IP address can have? We have had issues where people do port scans and utilise a large majority of our NAT pool. We are doing NAT on a ASR 1002 with an ESP5. It can do up to 250,000 NAT translations total and 50,000 new a second.
Now I found out that the ASR in a pool will only use the last available IP to do PAT.. The rest of the IP addresses are used for 1-1 NAT.
Here is our NAT config
> ip nat translation tcp-timeout 1800
> ip nat translation udp-timeout 1800
> ip nat translation max-entries 250000
> ip nat pool Level3Pool some-ip-address some-ip-address netmask 255.255.255.248
> ip nat inside source list NAT pool Level3Pool overload
Any idea about:
ip nat settings mode cgn
ip nat settings mode cgn
Thanks

Firewall or NAT: 250,000 sessions and 50,000 sessions-per-sec setup rate
This is from the datasheet. Pls check.
Table 3. Cisco ASR 1000 Series 5-Gbps ESP Module Performance and Scaling
Regards
Durga Prasad - Datasoft Comnet
Pls rate helpful posts
Sent from Cisco Technical Support Android App

ASR 1002-X, IOS XE and ISG

Hello All.
I started using asr 1002-x with IOS XE instead of 7201 as ISG + AAA + RADIUS.
I had a question on IOS XE 3.11, 3.10, 3.9.
Command "radius-server vsa send ..." is in a configuration, however it isn't applied and doesn't appear in running-config.
cod-r8(config)#radius-server vsa send?
accounting Send in accounting requests
authentication Send in access requests
cisco-nas-port Send cisco-nas-port VSA (2)
<cr>
cod-r8(config)#radius-server vsa send accounting
cod-r8(config)#radius-server vsa send authentication
cod-r8(config)#radius-server vsa send cisco-nas-port
cod-r8(config)#do sh run | include vsa
radius-server vsa send cisco-nas-port</cr>
It turns out that vsa is included by default or doesn't work at all?
Thanks.
Konstantin

Hi Konstantin,
Regarding "It is strange that these commands cleaned from sh run view.": this is normal for many default configuration commands.
Mine is a lab device so I cannot really comment on stability or provide you a recommendation based on that. However, I see that the download section from Cisco.com mentiones the following release as the recommended based on quality, stability and longevity:
asr1002x-universal.03.07.04a.S.152-4.S4a.SPA.bin
The best would be for you to check this with yor cisco Account Team or Advanced Services Team as normally they are the proper point of contacts for SW advisory.
Regards.

ASR 1002 ACL object-group for ZBFW

Hey guys,
Quick question. I just want to know if anyone has experience configuring object-groups for ACLs on the ASR 1002. I am trying to so this on ours to consolidate a large ACL we have. It only works if I specifically use the protocols within the configuration. If I add a service object-group to match my protocols it doesn't match. The same configuration works on a 2811 router.
I have a TAC case open and Cisco is telling me that object-groups are not supported on the ASRs but I have a hard time believing them if the commands clearly exist.
If anyone has experience in this please let me know.
Thanks,
Elton
Sent from Cisco Technical Support iPhone App

Elton,
"Hi Joe,
Support will start in 3.9S (Q1CY2013). Thanks.
Cheers,
/Mani"
From:
Ask The Expert: Introduction to Cisco ASR 1000 Series Aggregation Services Routers

ASR 1002 license

Hello,
we got a new cisco ASR 1002 ,does it require a license to work as BRAS??
Thnx

Yes, it does.
The feature licenses for ASR1K can be viewed at Table 2 on the URL http://www.cisco.com/en/US/prod/collateral/routers/ps9343/product_bulletin_c25-448292.html
You would need a license to enable broadband (FLASR1-BB-RTU) and another license with the appropriate number of sessions.
Cheers

CoPP on ASR 1002-X

Hello,
I'm trying to create CoPP on ASR 1002-X. I've created several base classess for different kinds of traffic I'm expecting to see.
This works fine, OSPF, HSRP, ARP, BFD packets are going to their respective classes. But there are still some packets that fall to class-default.
I've used "debug platform software infrastructure punt packet" to find out what packets are punted to the CPU.
There is one that I'm not sure how to deal with. It's called "RP <-> QFP keepalive". Should I include it in CoPP? If so, how can I match it?
Thanks.

Hi Blaz,
In the debugs, I still see Framed-Compression attribute in the access-accept sent from radius:
Mar 19 11:22:37.737: RADIUS: Framed-Compression [13] 6 None [0]
Changing the compression from "Van-Jacobsen-TCP-IP" to 'None' is not enough. You need to remove the Framed-Compression attribute completely from the radius profile for the subscriber.
Could you try that?
Regards

EVC config on ASR 1002 Router

Hello
I have one Adtran Router on platform: NetVanta 4660 EoX L2/L3 Router having OS version R10.11.0.E. I want to replace this router with Cisco ASR 1002 router. There is EVC configured on Adtran router having the following configuration:
interface gigabit-eth 0/1
speed 1000 nonegotiate
no shutdown
interface gigabit-eth 0/1.2
ce-vlan-id 10
connect evc dolphin
ip address 1.1.1.1 255.255.255.252
no shutdown
interface gigabit-eth 0/1.3
ce-vlan-id 20
connect evc dolphin
ip address 2.2.2.1 255.255.255.252
shutdown
evc dolphin
s-tag 150
connect men-port gigabit-ethernet 0/1
no shutdown
Now we want to configure this type of configuration on ASR 1002. So can anybody help me to achieve this?
Regards
Mukesh Kumar
Network Engineer
Spooster IT Services

Hi
You could try with bridging. Something like this
Interface bvi 1
no ip address
interface gig0
bridge-gropup 1
interface gig1
bridge-group 1
/Mikael

ASR 1002 Router doing multiple VRFs

I have an ASR 1002 router with Three VRFs coming into it. The first 2 VRFs are just terminating on the ASR with L3 sub interfaces. So no big deal with them. The third one is a VRF that needs to terminate on a separate router. The ASR that needs to split out this 3rd VRF is not allowed to have an IP address for it. So it just needs to forward off this as L2 to a separate physical port and then terminates on a different router.
So my question is what is the best way to accomplish this on the ASR? Could I setup a pseudo wire setup or is there an easier way to just split off this as separate VLAN to the other physical interface?

Hi
You could try with bridging. Something like this
Interface bvi 1
no ip address
interface gig0
bridge-gropup 1
interface gig1
bridge-group 1
/Mikael

ASR 1002 Monitor

I have an ASR 1002 that I have placed the following config on:
monitor session 1 type local
source interface Gi0/0/2 , Gi0/3/0
destination interface Gi0/3/4
I am not receiving any traffic on the destination port, is this really supported on the ASR?

Hello,
Please see below.
http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/lanswitch/configuration/xe-3s/asr1000/lanswitch-xe-3s-asr1000-book/lnsw-conf-erspan.html#GUID-152D9875-169B-461F-A34B-ABAABD0C1FF8
"The monitor session span-session-number type local command is not supported on Cisco ASR 1000 Series Routers."
===You may though configure ERSPAN to work as a local SPAN===
* Make sure that both the source session and destination session have the same erspan-id
* Use one locally configured IPv4 address to configure the "ip address" and "origin ip address" in source session and "ip address" in destination session
Example snip: Monitor interface Gig0/0/0 traffic, and then send out through interface Gig0/0/1..
monitor session 10 type erspan-source
source interface Gi0/0/0
destination
erspan-id 10
ip address 10.10.10.1
origin ip address 10.10.10.1
monitor session 20 type erspan-destination
destination interface Gi0/0/1
source
erspan-id 10
ip address 10.10.10.1

ASR 1002 doesnt support "media type sfp " command ?!!

hi all ,
i have a new ASR 1002 , i want to use interfaces as fiber not as rj45
when i go to interface mode , i cant see "media type sfp " !!!!
does that mesn it dont support fiber ???
or i need to upgrade my IOS ??
====================
here is my version
Gateway-ASR1002#sh version
Cisco IOS XE Software, Version 03.11.00.S - Standard Support Release
Cisco IOS Software, ASR1000 Software (PPC_LINUX_IOSD-ADVENTERPRISEK9-M), Version 15.4(1)S, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Tue 19-Nov-13 20:12 by mcpre
Cisco IOS-XE software, Copyright (c) 2005-2013 by cisco Systems, Inc.
All rights reserved. Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0. The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0. For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.
ROM: IOS-XE ROMMON
Gateway-ASR1002 uptime is 1 day, 2 hours, 19 minutes
Uptime for this control processor is 1 day, 2 hours, 23 minutes
System returned to ROM by reload at 19:55:40 UTC Thu Apr 3 2014
System image file is "bootflash:/asr1000rp1-adventerprisek9.03.11.00.S.154-1.S-std.bi"
Last reload reason: PowerOn
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
cisco ASR1002 (2RU) processor with 1662145K/6147K bytes of memory.
Processor board ID FOX1807GBZW
4 Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
7757823K bytes of eUSB flash at bootflash:.
===============================

ASR 1000 Series Router
ASR1001
ASR1002
ASR1002-F
ASR1002-X
SFP-GE-T
XE 2.1
SFP-GE-S
SFP-GE-L
SFP-GE-Z
CWDM SFP
DWDM SFP
XE 2.1
XE 2.1
GLC-BX-D
GLC-BX-U
XE 2.5
XE 2.5
GLC-SX-MMD
GLC-LH-SMD
GLC-ZX-SMD
XE 3.4S
XE 3.4S
GLC-EX-SMD
XE 3.5S
XE 3.5S
ASR 1000 platform with SPA cards
Software support on the ASR 1000 modular platforms is determined by the platform on which the SPA is installed. Refer to the SPA release notes for the correct software release.
http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/configuration/ASR1000/ASRspasw.pdf

ASR 1002 inter-chassis redundancy

Similar Messages

Maybe you are looking for