Приведу текущий конфиг:
Код:
aaa new-model
aaa session-mib disconnect
!
aaa group server radius vpdn
server 10.11.1.11 auth-port 1812 acct-port 1813
!
aaa authentication login default local
aaa authentication ppp default group vpdn
aaa authorization exec default local
aaa authorization network default group vpdn
aaa accounting delay-start
aaa accounting update periodic 1
aaa accounting network default start-stop group vpdn
!
aaa nas port extended
aaa session-id common
!
resource policy
!
syscon address 10.11.1.11 billing
syscon shelf-id 0
spe country russia
!
spe default-firmware spe-firmware-1
ip subnet-zero
no ip source-route
!
!
ip cef
no ip dhcp use vrf connected
no ip dhcp conflict logging
ip dhcp excluded-address 192.168.111.1
ip dhcp ping packets 0
!
ip dhcp pool dhcp1
network 192.168.111.0 255.255.255.0
lease 30
!
!
ip address-pool local
vpdn enable
!
vpdn-group 1
! Default PPTP VPDN group
accept-dialin
protocol pptp
virtual-template 10
local name server
ip precedence immediate
!
policy-map priority_marker
class class-default
set ip precedence 2
!
!
interface Loopback0
no ip address
no ip redirects
no ip mroute-cache
!
interface FastEthernet0/0
no ip address
ip route-cache flow
duplex auto
speed auto
no cdp enable
!
interface FastEthernet0/0.40
description Real-Backbone-NET
encapsulation dot1Q 40 native
ip address x.x.x.13 255.255.255.240
no ip redirects
no ip mroute-cache
no snmp trap link-status
no cdp enable
!
interface FastEthernet0/0.111
description Local-Backbone-NET
encapsulation dot1Q 111
ip address 10.11.1.13 255.255.255.0
no ip redirects
no ip mroute-cache
no snmp trap link-status
no cdp enable
!
interface FastEthernet0/1
no ip address
no ip redirects
ip route-cache flow
duplex auto
speed auto
no cdp enable
!
interface FastEthernet0/1.60
description Wired-NET
encapsulation dot1Q 60 native
ip address x.x.x.81 255.255.255.248 secondary
ip address 192.168.111.1 255.255.255.0
no ip redirects
no ip proxy-arp
no ip mroute-cache
no snmp trap link-status
no cdp enable
!
!
interface Virtual-Template10
ip unnumbered FastEthernet0/0.40
no ip redirects
ip route-cache flow
peer default ip address pool VPN-IPs
ppp authentication chap
!
!
ip local pool VPN-IPs x.x.x.193 x.x.x.222
ip classless
ip route 0.0.0.0 0.0.0.0 x.x.x.1
ip flow-export source FastEthernet0/0.40
ip flow-export version 5
ip flow-export destination x.x.x.11 2055
!
no ip http server
!
ip radius source-interface FastEthernet0/0.111
snmp-server community billing RW 97
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps calltracker
snmp-server enable traps tty
snmp-server enable traps aaa_server
snmp-server host 10.11.1.11 161
snmp-server host 10.11.1.11 2c
snmp-server host 10.11.1.11 aaa
snmp-server host 10.11.1.11 billing
no cdp run
!
radius-server attribute 31 mac format unformatted
radius-server host 10.11.1.11 auth-port 1812 acct-port 1813 timeout 10 retransmit 5 key 7 121A0A19
radius-server vsa send accounting
radius-server vsa send authentication