Saturday, August 18, 2012

The Cisco ISG – PTA


The Cisco ISG – PTA

When we implement PPPoE using a multi-VRF setup it appears that the COA client needs to be on the same VRF as the client it is referencing by the SSG-Account-Info, usually this is the clients IP address.

Diagram 1.

 



Virtual-Template Configuration:



The loopback and virtual-template interfaces are on the INTERNET VRF.

COA Server Configuration:


Now when I try to send a COA request to activate a service:

You can see that we are getting a COA Nack.


The way to resolve this is to enable the NAS to send the VSA on the accounting requests and use the “parent-session-id” as your reference.


With the above we can see that the service has been activated.