Hello.

My setup:
1 TNT TAOS 8.0.4 with E1 and OC3ATM.
2 RADIUS servers,
ISDN routers as "users".

I've tried to setup system so that connection could be opened from router 
and from TNT. For authentication I use RADIUS (CLID). I use Vrouters and 
ATM-Direct to separate customers and routing users to corresponding ATM 
vpi/vci.

Dial in works fine. ISDN router dials in, TNT checks then CLID from radius 
and routes the connection to Vrouter and ATM. For dial in I have one 
separate radius profile (Sorry those profiles are not in standard format):

User: DTIETESTI-HKI-1
User type: Native User
Return list attributes:
Ascend-ATM-Direct - ATM-Direct-Yes
Ascend-ATM-Direct-Profile - dtietesti-atm
Ascend-BACP-Enable - BACP-Yes
Ascend-Route-IP - Route-IP-Yes
Ascend-VRouter-Name - dtietesti-vrou
Framed-IP-Address - 195.237.41.137
Framed-IP-Netmask - 255.255.255.248
Framed-Protocol - Ascend-MP
Service-Type - Framed

----

But, dial out is the problem. When TNT originates the call and is waiting 
call back from ISDN router, router does the call back but routing table 
shows that call back connection is in different ppp interface than static 
route for that connection.
Also for dial out I have one radius profile:

User: DTIETESTI-HKI-1-OUT
User type: Native User
Return list attributes:
Ascend-Data-Svc - Switched-64K
Ascend-Dial-Number - 80935176250
Ascend-Expect-Callback - Expect-Callback-Yes
Framed-IP-Address - 195.237.41.137
Framed-IP-Netmask - 255.255.255.248
Framed-Protocol - Ascend-MP
Service-Type - Outbound
User-Name - dtietesti-hki-1


Static routes to branch offices are also configured in RADIUS, so those 
routes can be viewed with netstat -r command. Here is the route profile:

User: ROUTE-1
User type: Native User
Return list attributes:
Framed-Route - 195.237.41.136/29 195.237.41.137 1 n DTIETESTI-HKI-1-OUT 100 
dtietesti-vrou
Service-Type - Outbound
--------------------------------------------------------------------------

Here some more details about the issue:

Idle state:
Route 195.237.41.136/29 195.237.41.137 wanabe
I send 1 ping to that route and tnt originates the call and expect call back.

admin> netstat dtietesti-vrou -rn
Destination Gateway IF Flg Pref Met Use Age
127.0.0.0/8 - bh0_dtietes CP 0 0 0 755074
127.0.0.1/32 - local CP 0 0 0 755074
127.0.0.2/32 - rj0_dtietes CP 0 0 0 755074
172.25.60.128/30 172.25.60.130 wan22 rGT 60 1 0 175785
172.25.60.129/32 - local rT 0 0 0 175785
172.25.60.130/32 172.25.60.130 wan22 rT 60 1 0 175785
195.237.41.136/29 195.237.41.137 wanabe SG 100 1 0 189
195.237.41.144/29 195.237.41.145 wanabe SG 100 1 0 189
195.237.41.152/29 195.237.41.153 wanabe SG 100 1 0 189
---------

Link is up:
Note that route for active connection shows DIFFERENT IF number that static 
route.

195.237.41.136/29 195.237.41.137 wan122 rGT
195.237.41.136/29 195.237.41.137 wan121 *SG
195.237.41.137/32 195.237.41.137 wan122 rT

admin> netstat dtietesti-vrou -rn
Destination Gateway IF Flg Pref Met Use Age
127.0.0.0/8 - bh0_dtietes CP 0 0 0 755091
127.0.0.1/32 - local CP 0 0 0 755091
127.0.0.2/32 - rj0_dtietes CP 0 0 0 755091
172.25.60.128/30 172.25.60.130 wan22 rGT 60 1 0 175802
172.25.60.129/32 - local rT 0 0 0 175802
172.25.60.130/32 172.25.60.130 wan22 rT 60 1 0 175802
195.237.41.136/29 195.237.41.137 wan122 rGT 60 1 0 2
195.237.41.136/29 195.237.41.137 wan121 *SG 100 1 1 206
195.237.41.137/32 195.237.41.137 wan122 rT 60 1 0 2
195.237.41.144/29 195.237.41.145 wanabe SG 100 1 0 206
195.237.41.152/29 195.237.41.153 wanabe SG 100 1 0 206

admin> netstat dtietesti-vrou -i
Name MTU Net/Dest Address Ipkts Ierr Opkts Oerr
vr0_dtietes 1500 10.1.1.1/32 10.1.1.1 0 0 0 0
lo0_dtietes 1500 127.0.0.1/32 127.0.0.1 1 0 1 0
local 65535 127.0.0.1/32 127.0.0.1 1 0 1 0
rj0_dtietes 1500 127.0.0.2/32 127.0.0.2 0 0 0 0
bh0_dtietes 1500 127.0.0.3/32 127.0.0.3 0 0 0 0
wan22 1560 172.25.60.130 172.25.60.129 6477 0 3321 0
wan122 1524 195.237.41.137 10.1.1.1 8 0 8 0
--------------

Link is dropped by ISDN router.

admin> netstat dtietesti-vrou -i
Name MTU Net/Dest Address Ipkts Ierr Opkts Oerr
vr0_dtietes 1500 10.1.1.1/32 10.1.1.1 0 0 0 0
lo0_dtietes 1500 127.0.0.1/32 127.0.0.1 1 0 1 0
local 65535 127.0.0.1/32 127.0.0.1 1 0 1 0
rj0_dtietes 1500 127.0.0.2/32 127.0.0.2 0 0 0 0
bh0_dtietes 1500 127.0.0.3/32 127.0.0.3 0 0 0 0
wan22 1560 172.25.60.130 172.25.60.129 6477 0 3321 0

Route for active connection IF wan122 will be destroied but static route 
shows IF name wan 121.
Route 195.237.41.136/29 195.237.41.137 wan121
Now tnt will not dial out before routes are refreshed from radius (refresh -r)

admin> netstat dtietesti-vrou -rn
Destination Gateway IF Flg Pref Met Use Age
127.0.0.0/8 - bh0_dtietes CP 0 0 0 755181
127.0.0.1/32 - local CP 0 0 0 755181
127.0.0.2/32 - rj0_dtietes CP 0 0 0 755181
172.25.60.128/30 172.25.60.130 wan22 rGT 60 1 0 175892
172.25.60.129/32 - local rT 0 0 0 175892
172.25.60.130/32 172.25.60.130 wan22 rT 60 1 0 175892
195.237.41.136/29 195.237.41.137 wan121 SG 100 1 1 296
195.237.41.144/29 195.237.41.145 wanabe SG 100 1 0 296
195.237.41.152/29 195.237.41.153 wanabe SG 100 1 0 296
-----------------------------

Best Regards,

Jyrki Kainulainen