Configuring radius, Configuration examples for half-duplex vrf – Cisco 10000 User Manual

Page 158

Advertising
background image

4-26

Cisco 10000 Series Router Software Configuration Guide

OL-2226-23

Chapter 4 Configuring Multiprotocol Label Switching

Half-Duplex VRF

Configuring RADIUS

To configure the downstream VRF for an AAA server, enter the following Cisco attribute value:

cisco-avpair = “ip:vrf-id=vrf-name1 downstream vrf-name2”

where:

The vrf-name1 argument is the name of the VRF associated with the subinterface or virtual template
interface.

The vrf-name2 argument is the name of the downstream VRF into which all of the subscriber routes from
the AAA server are installed.

Note

Instead of using the lcp:interface-config RADIUS attribute, we recommend that you use the ip:vrf-id
RADIUS attribute when supported in Cisco IOS software. Unlike the lcp:interface-config attribute,
which causes full virtual interfaces to be used, the ip:vrf-id attribute causes virtual subinterfaces to be
used, which significantly improves scalability.

Example 4-10

shows how to configure a downstream VRF named D on a AAA server:

Example 4-10 Configuring the Downstream VRF on RADIUS

cisco-avpair = "ip:vrf-id=U downstream D"

Configuration Examples for Half-Duplex VRF

This section provides the following configuration examples. These examples use the hub and spoke
topology shown in

Figure 4-4

.

Hub and Spoke Sample Configuration with Half-Duplex VRFs, page 4-27

RADIUS Sample Configuration, page 4-28

Figure 4-4

Sample Topology for Half-Duplex Configuration

97768

Labe

Vitava

ATM

ISP

Lipno

Svitava

Hub

Router

Nezarka

Spokes

MPLS Core

Spoke PE

Router

P Router

Hub PE

Router

Odra

RADIUS Server

Advertising