Hello. My setup: 1 TNT TAOS 8.0.4 with E1 and OC3ATM. 2 RADIUS servers, ISDN routers as "users". I've tried to setup system so that connection could be opened from router and from TNT. For authentication I use RADIUS (CLID). I use Vrouters and ATM-Direct to separate customers and routing users to corresponding ATM vpi/vci. Dial in works fine. ISDN router dials in, TNT checks then CLID from radius and routes the connection to Vrouter and ATM. For dial in I have one separate radius profile (Sorry those profiles are not in standard format): User: DTIETESTI-HKI-1 User type: Native User Return list attributes: Ascend-ATM-Direct - ATM-Direct-Yes Ascend-ATM-Direct-Profile - dtietesti-atm Ascend-BACP-Enable - BACP-Yes Ascend-Route-IP - Route-IP-Yes Ascend-VRouter-Name - dtietesti-vrou Framed-IP-Address - 195.237.41.137 Framed-IP-Netmask - 255.255.255.248 Framed-Protocol - Ascend-MP Service-Type - Framed ---- But, dial out is the problem. When TNT originates the call and is waiting call back from ISDN router, router does the call back but routing table shows that call back connection is in different ppp interface than static route for that connection. Also for dial out I have one radius profile: User: DTIETESTI-HKI-1-OUT User type: Native User Return list attributes: Ascend-Data-Svc - Switched-64K Ascend-Dial-Number - 80935176250 Ascend-Expect-Callback - Expect-Callback-Yes Framed-IP-Address - 195.237.41.137 Framed-IP-Netmask - 255.255.255.248 Framed-Protocol - Ascend-MP Service-Type - Outbound User-Name - dtietesti-hki-1 Static routes to branch offices are also configured in RADIUS, so those routes can be viewed with netstat -r command. Here is the route profile: User: ROUTE-1 User type: Native User Return list attributes: Framed-Route - 195.237.41.136/29 195.237.41.137 1 n DTIETESTI-HKI-1-OUT 100 dtietesti-vrou Service-Type - Outbound -------------------------------------------------------------------------- Here some more details about the issue: Idle state: Route 195.237.41.136/29 195.237.41.137 wanabe I send 1 ping to that route and tnt originates the call and expect call back. admin> netstat dtietesti-vrou -rn Destination Gateway IF Flg Pref Met Use Age 127.0.0.0/8 - bh0_dtietes CP 0 0 0 755074 127.0.0.1/32 - local CP 0 0 0 755074 127.0.0.2/32 - rj0_dtietes CP 0 0 0 755074 172.25.60.128/30 172.25.60.130 wan22 rGT 60 1 0 175785 172.25.60.129/32 - local rT 0 0 0 175785 172.25.60.130/32 172.25.60.130 wan22 rT 60 1 0 175785 195.237.41.136/29 195.237.41.137 wanabe SG 100 1 0 189 195.237.41.144/29 195.237.41.145 wanabe SG 100 1 0 189 195.237.41.152/29 195.237.41.153 wanabe SG 100 1 0 189 --------- Link is up: Note that route for active connection shows DIFFERENT IF number that static route. 195.237.41.136/29 195.237.41.137 wan122 rGT 195.237.41.136/29 195.237.41.137 wan121 *SG 195.237.41.137/32 195.237.41.137 wan122 rT admin> netstat dtietesti-vrou -rn Destination Gateway IF Flg Pref Met Use Age 127.0.0.0/8 - bh0_dtietes CP 0 0 0 755091 127.0.0.1/32 - local CP 0 0 0 755091 127.0.0.2/32 - rj0_dtietes CP 0 0 0 755091 172.25.60.128/30 172.25.60.130 wan22 rGT 60 1 0 175802 172.25.60.129/32 - local rT 0 0 0 175802 172.25.60.130/32 172.25.60.130 wan22 rT 60 1 0 175802 195.237.41.136/29 195.237.41.137 wan122 rGT 60 1 0 2 195.237.41.136/29 195.237.41.137 wan121 *SG 100 1 1 206 195.237.41.137/32 195.237.41.137 wan122 rT 60 1 0 2 195.237.41.144/29 195.237.41.145 wanabe SG 100 1 0 206 195.237.41.152/29 195.237.41.153 wanabe SG 100 1 0 206 admin> netstat dtietesti-vrou -i Name MTU Net/Dest Address Ipkts Ierr Opkts Oerr vr0_dtietes 1500 10.1.1.1/32 10.1.1.1 0 0 0 0 lo0_dtietes 1500 127.0.0.1/32 127.0.0.1 1 0 1 0 local 65535 127.0.0.1/32 127.0.0.1 1 0 1 0 rj0_dtietes 1500 127.0.0.2/32 127.0.0.2 0 0 0 0 bh0_dtietes 1500 127.0.0.3/32 127.0.0.3 0 0 0 0 wan22 1560 172.25.60.130 172.25.60.129 6477 0 3321 0 wan122 1524 195.237.41.137 10.1.1.1 8 0 8 0 -------------- Link is dropped by ISDN router. admin> netstat dtietesti-vrou -i Name MTU Net/Dest Address Ipkts Ierr Opkts Oerr vr0_dtietes 1500 10.1.1.1/32 10.1.1.1 0 0 0 0 lo0_dtietes 1500 127.0.0.1/32 127.0.0.1 1 0 1 0 local 65535 127.0.0.1/32 127.0.0.1 1 0 1 0 rj0_dtietes 1500 127.0.0.2/32 127.0.0.2 0 0 0 0 bh0_dtietes 1500 127.0.0.3/32 127.0.0.3 0 0 0 0 wan22 1560 172.25.60.130 172.25.60.129 6477 0 3321 0 Route for active connection IF wan122 will be destroied but static route shows IF name wan 121. Route 195.237.41.136/29 195.237.41.137 wan121 Now tnt will not dial out before routes are refreshed from radius (refresh -r) admin> netstat dtietesti-vrou -rn Destination Gateway IF Flg Pref Met Use Age 127.0.0.0/8 - bh0_dtietes CP 0 0 0 755181 127.0.0.1/32 - local CP 0 0 0 755181 127.0.0.2/32 - rj0_dtietes CP 0 0 0 755181 172.25.60.128/30 172.25.60.130 wan22 rGT 60 1 0 175892 172.25.60.129/32 - local rT 0 0 0 175892 172.25.60.130/32 172.25.60.130 wan22 rT 60 1 0 175892 195.237.41.136/29 195.237.41.137 wan121 SG 100 1 1 296 195.237.41.144/29 195.237.41.145 wanabe SG 100 1 0 296 195.237.41.152/29 195.237.41.153 wanabe SG 100 1 0 296 ----------------------------- Best Regards, Jyrki Kainulainen