R: R: Cisco VRF + Radius

You don't need to set up vrf templates if everyone is going to use the default radius server and default authentication and au6thorization groups. It's optional.

Thanks Ivan, now it's clear I don't need templates...

What does debug radius and debug ppp negotiation on Cisco say about why was the Framed-IP-Address rejected. If it fails on IPCP then your route is the problem. Since it all goes well without it ...

Yes, the problem was on the nas side. Now it seems to understand and correctly assign the IP address to the cpe.

Ivan Kalik Kalik Informatika ISP

Thanks, Francesco Cristofori.