Hello all, I am using FreeRadius 2.1.8 with MySQL to authenticate BBA users. I get L2TP sessions from my ISP (=LAC) arriving in VRF l2tp_vrf which I want to terminate in a different VRF (e.g. inet_vrf). Basic authentication works as long as I do not intruduce cisco-avpair attributes. Which ones do I need? I tried "lcp:interface-config#1=ip vrf forwarding (inet_vrf)" and "ip:vrf-id:=inet_vrf" in my radgroupreply table - without success. From the "debug radius authentication" I see "AAA Unsupported Attr: interface" and "parse unknown cisco vsa "vrf-id:". Here are some parts of my Cisco config: aaa authentication login default local aaa authentication ppp default group radius aaa authorization exec default local aaa authorization network default group radius aaa accounting delay-start aaa accounting update newinfo aaa accounting exec default action-type start-stop group radius aaa accounting network default action-type start-stop broadcast group radius aaa accounting connection default action-type start-stop group radius aaa session-id common vpdn-group 1 accept-dialin protocol l2tp virtual-template 1 terminate-from hostname LAC vpn vrf l2tp_vrf source-ip xxx.xxx.xxx.xxx local name LNS l2tp tunnel password 0 xyz ip mtu adjust interface Virtual-Template1 mtu 1460 ip unnumbered Loopback0 no snmp trap link-status peer default ip address pool INET_ADDR_POOL no keepalive ppp mru match ppp authentication pap callin ppp ipcp mask 255.255.255.255 end What am I missing? Thanks in advance! Cheers, Alexander