aaa new-model
aaa session-mib disconnect
!
aaa group server radius vpdn
  server 10.11.1.11 auth-port 1812 acct-port 1813
!
aaa authentication login default local
aaa authentication ppp default group vpdn
aaa authorization exec default local
aaa authorization network default group vpdn
aaa accounting delay-start
aaa accounting update periodic 1
aaa accounting network default start-stop group vpdn
!
aaa nas port extended
aaa session-id common
!
resource policy
!
syscon address 10.11.1.11 billing
syscon shelf-id 0
spe country russia
!
spe default-firmware spe-firmware-1
ip subnet-zero
no ip source-route
!
!
ip cef
no ip dhcp use vrf connected
no ip dhcp conflict logging
ip dhcp excluded-address 192.168.111.1
ip dhcp ping packets 0
!
ip dhcp pool dhcp1
      network 192.168.111.0 255.255.255.0
      lease 30
!
!
ip address-pool local
vpdn enable
!
vpdn-group 1
! Default PPTP VPDN group
  accept-dialin
    protocol pptp
    virtual-template 10
  local name server
  ip precedence immediate
!
policy-map priority_marker
  class class-default
    set ip precedence 2
!
!
interface Loopback0
  no ip address
  no ip redirects
  no ip mroute-cache
!
interface FastEthernet0/0
  no ip address
  ip route-cache flow
  duplex auto
  speed auto
  no cdp enable
!
interface FastEthernet0/0.40
  description Real-Backbone-NET
  encapsulation dot1Q 40 native
  ip address x.x.x.13 255.255.255.240
  no ip redirects
  no ip mroute-cache
  no snmp trap link-status
  no cdp enable
!
interface FastEthernet0/0.111
  description Local-Backbone-NET
  encapsulation dot1Q 111
  ip address 10.11.1.13 255.255.255.0
  no ip redirects
  no ip mroute-cache
  no snmp trap link-status
  no cdp enable
!
interface FastEthernet0/1
  no ip address
  no ip redirects
  ip route-cache flow
  duplex auto
  speed auto
  no cdp enable
!
interface FastEthernet0/1.60
  description Wired-NET
  encapsulation dot1Q 60 native
  ip address x.x.x.81 255.255.255.248 secondary
  ip address 192.168.111.1 255.255.255.0
  no ip redirects
  no ip proxy-arp
  no ip mroute-cache
  no snmp trap link-status
  no cdp enable
!
!
interface Virtual-Template10
  ip unnumbered FastEthernet0/0.40
  no ip redirects
  ip route-cache flow
  peer default ip address pool VPN-IPs
  ppp authentication chap
!
!
ip local pool VPN-IPs x.x.x.193 x.x.x.222
ip classless
ip route 0.0.0.0 0.0.0.0 x.x.x.1
ip flow-export source FastEthernet0/0.40
ip flow-export version 5
ip flow-export destination x.x.x.11 2055
!
no ip http server
!
ip radius source-interface FastEthernet0/0.111
snmp-server community billing RW 97
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps calltracker
snmp-server enable traps tty
snmp-server enable traps aaa_server
snmp-server host 10.11.1.11 161
snmp-server host 10.11.1.11 2c
snmp-server host 10.11.1.11 aaa
snmp-server host 10.11.1.11 billing
no cdp run
!
radius-server attribute 31 mac format unformatted
radius-server host 10.11.1.11 auth-port 1812 acct-port 1813 timeout 10 retransmit 5 key 7 121A0A19
radius-server vsa send accounting
radius-server vsa send authentication