I'm trying to configure a Cisco 37xx to serve as a host for a multilink PPPoE session, authenticating via radius, that also performs ospf determination and passthrough on the multilink session. Currently, the router performs the multilink connection, but OSPF is not running on the derived virtual interface; the networks connected via the multilink session are injected as external routes via redistributing configured static routes.
The current config for the host has the virtual access sessions cloned from the global one, the local address of the network routed over the link assigned to the FE0/0 interface as a secondary IP, and the remote IP assigned via radius authentication:
interface Virtual-Template1
mtu 1492
ip unnumbered FastEthernet0/0
peer default ip address pool xxxpool
ppp authentication pap
ppp multilink
!
router ospf 100
no log-adjacency-changes
area 0 authentication message-digest
redistribute connected subnets
redistribute static subnets
network xxx.xxx.xxx.xxx 0.0.0.0 area 0
default-information originate
!
And runtime values are:
Virtual-Access3, bundle name is xxxxx
Username is xxxxx
Endpoint discriminator is xxx
Bundle up for 1w3d, total bandwidth 6016, load 6/255
Receive buffer limit 24384 bytes, frag timeout 1000 ms
Using relaxed lost fragment detection algorithm.
0/0 fragments/bytes in reassembly list
1256 lost fragments, 34511188 reordered
42258/3359807 discarded fragments/bytes, 20857 lost received
0x7C0F04 received sequence, 0x5036C6 sent sequence
Member links: 2 (max 2, min not set)
xxx (xx.xx.xx.xx), since 1w3d, unsequenced
xxx (xx.xx.xx.xx), since 1w3d, unsequenced
No inactive multilink interfaces
Virtual-Access3 is up, line protocol is up
Hardware is Virtual Access interface
Interface is unnumbered. Using address of FastEthernet0/0 (xx.xx.xx.xx)
MTU 1460 bytes, BW 6016 Kbit, DLY 100000 usec,
reliability 255/255, txload 7/255, rxload 1/255
Encapsulation PPP, LCP Open, multilink Open
Open: IPCP
MLP Bundle vaccess, cloned from Virtual-Template1
From reading documentation, it looks like I need to define an explicit multilink interface locally on the router that I can then bring up OSPF on, set the interface to use non-broadcast OSPF and define the neighbors that it needs to talk with. It appears I can then use radius to define the attributes of the connection via Cisco-AVpair attributes, but I can't find anything to force the group number for a specific PPP session.
If I do something such as the following:
interface MultilinkConn
! Glue network IP
ip address xx.xx.xx.xx 255.255.255.252
no ip proxy-arp
no ip mroute-cache
ip ospf network non-broadcast
ip ospf message-digest-key 29 md5 7 xxxxx
ip ospf priority 100
ppp multilink
ppp multilink group 10
!
router ospf 100
no log-adjacency-changes
area 0 authentication message-digest
redistribute connected subnets
redistribute static subnets
network xx.xx.xx.xx 0.0.0.0 area 0
default-information originate
! IP of far end router - priority 1, 20 sec poll interval
neighbor xx.xx.xx.xx 1 20
!
How do I then, via radius, force the negotiated multilink ppp session to use group 10 and thus get aggregated into the MultilinkConn session? http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_radcfg/configuration/15-2mt/sec-mppp-rad-preauth.html shows the radius extensions, but there doesn't appear to be anything to control assigned multilink groups.
Alternately, if I'm going about this the wrong way, what is the reccommended method for configuring the router to behave in this manner?
