我在 ASR1001-X 上遇到 PPPoE 身份验证问题,当建立会话时,它会尝试创建完整的虚拟访问接口,而不仅仅是创建我想要的子接口:
> Session creation failed due to Full Virtual-Access Interfaces not being supported. Check that all applied Virtual-Template and RADIUS features support Virtual-Access sub-interfaces.
我很确定这是因为我的半径服务器(freeradius)正在发回 Framed-Compression = VJ TCP/IP。我没有将其指定为回复属性,所以看起来它只是默认设置的。日志片段:
*Apr 10 15:33:33.837: RADIUS: authenticator 53 22 AB ED 7E A5 51 3B - 59 8B 21 0A 16 49 98 8A
*Apr 10 15:33:33.837: RADIUS: Framed-Protocol [7] 6 PPP [1]
*Apr 10 15:33:33.837: RADIUS: User-Name [1] 7 "CN987"
*Apr 10 15:33:33.837: RADIUS: CHAP-Password [3] 19 *
*Apr 10 15:33:33.837: RADIUS: NAS-Port-Type [61] 6 Virtual [5]
*Apr 10 15:33:33.837: RADIUS: NAS-Port [5] 6 0
*Apr 10 15:33:33.837: RADIUS: NAS-Port-Id [87] 14 "0/0/2/1518.2"
*Apr 10 15:33:33.837: RADIUS: Vendor, Cisco [26] 41
*Apr 10 15:33:33.837: RADIUS: Cisco AVpair [1] 35 "client-mac-address=000c.42bc.f8e2"
*Apr 10 15:33:33.837: RADIUS: Service-Type [6] 6 Framed [2]
*Apr 10 15:33:33.837: RADIUS: NAS-IP-Address [4] 6 An.IP.Add.Ess
*Apr 10 15:33:33.837: RADIUS(000015EC): Sending a IPv4 Radius Packet
*Apr 10 15:33:33.837: RADIUS(000015EC): Started 5 sec timeout
*Apr 10 15:33:33.838: RADIUS: Received from id 1645/231 An.IP.Add.Ess:1812, Access-Accept, len 38
*Apr 10 15:33:33.838: RADIUS: authenticator 37 64 DC EF BA E1 90 D8 - 48 58 C3 78 D9 CD 3E 2A
*Apr 10 15:33:33.838: RADIUS: Framed-Protocol [7] 6 PPP [1]
*Apr 10 15:33:33.838: RADIUS: Framed-Compression [13] 6 VJ TCP/IP Header Compressi[1]
*Apr 10 15:33:33.838: RADIUS: Service-Type [6] 6 Framed [2]
*Apr 10 15:33:33.838: RADIUS(000015EC): Received from id 1645/231
*Apr 10 15:33:33.840: VT[Vi3]:Request took 1 msec, 1 msec processing time
*Apr 10 15:33:33.864: %FMANRP_ESS-4-FULLVAI: Session creation failed due to Full Virtual-Access Interfaces not being supported. Check that all applied Virtual-Template and RADIUS features support Virtual-Access sub-interfaces. swidb= 0x7F18F5B493B8, ifnum= 34
我一辈子都想不出如何阻止这种情况。任何想法将不胜感激。