Cisco 10000-2P2-2DC Software Guide - Page 201

Chapter 5 Configuring the Layer 2 Tunnel Protocol Access Concentrator and Network Server L2TP Network Server Step 10 Command Router(config)# radius-server attribute 44 include-in-access-req vrf vrf-name Step 11 Router(config)# radius-server domain-stripping vrf vrf-name Purpose Sends RADIUS attribute 44 in access request packets before user authentication and enables the specification on a per VRF basis. The vrf vrf-name keyword and argument specify the per VRF configuration. (Optional) Enables VRF-aware domain-stripping. The vrf vrf-name keyword and argument specify the per VRF configuration. Verifying and Troubleshooting per VRF AAA To verify and troubleshoot the per VRF AAA feature, enter the following commands in privileged EXEC mode. Note Due to the large output of some of the commands, many events are not displayed on the console. Instead, the messages are logged to a console log file. To limit the rate that the Cisco 10000 series router logs system messages, enter the logging rate-limit command. For more information, see the "Troubleshooting and Fault Management Commands in the Cisco IOS Configuration Fundamentals Command Reference, Release 12.2. Command Router# show ip route vrf vrf-name Router# debug aaa accounting Router# debug aaa authorization Router# debug ppp negotiation Router# debug radius Router# debug vpdn event Router# debug vpdn error Purpose Displays the IP routing table associated with a VRF. Displays information on accountable events as they occur. Displays information on AAA authorization. Displays information on traffic and exchanges in an internetwork implementing PPP. Displays information associated with RADIUS. Displays L2TP errors and events that are a part of normal tunnel establishment or shutdown for VPNs. Displays debug traces for VPN. Caution Because debugging output is assigned high priority in the CPU process, it can render the system unusable. For this reason, use debug commands only to troubleshoot specific problems or during troubleshooting sessions with Cisco Systems technical support personnel. Moreover, it is best to use debug commands during periods of lower network traffic and fewer users. Debugging during these periods decreases the likelihood that increased debug command processing overhead will affect system use. OL-2226-23 Cisco 10000 Series Router Software Configuration Guide 5-35