Есть вполне рабочая конфигурация для организации PPPoVPDN подключений с авторизацией на RADIUS'е.
Код: Выделить всё
...
aaa new-model
aaa session-mib disconnect
!
!
aaa authentication login default local
aaa authentication ppp default group radius
aaa authorization config-commands
aaa authorization exec default local
aaa authorization network default group radius group radius
aaa authorization configuration default group radius
aaa accounting update periodic 1
aaa accounting network default start-stop group radius
...
vpdn enable
vpdn aaa attribute nas-ip-address vpdn-nas
vpdn logging
vpdn logging user
!
vpdn-group 1
! Default PPTP VPDN group
accept-dialin
protocol pptp
virtual-template 1
session-limit 32767
l2tp tunnel receive-window 1024
ip pmtu
ip mtu adjust
!
...
interface FastEthernet0/1
no ip address
duplex auto
speed auto
fair-queue
!
interface FastEthernet0/1.103
description UKRCOM Kindiyskoe shosse
encapsulation dot1Q 103
ip address 10.75.16.1 255.255.255.0 secondary
ip address 10.75.15.1 255.255.255.0
no ip redirects
no ip unreachables
ip nat outside
ip virtual-reassembly
!
interface FastEthernet0/1.106
description UKRCOM XBK
encapsulation dot1Q 106
ip address 10.75.10.1 255.255.255.0 secondary
ip address 10.75.9.1 255.255.255.0
no ip redirects
no ip unreachables
ip nat outside
ip virtual-reassembly
!
...
interface Virtual-Template1
ip unnumbered Loopback0
ip access-group ExtFW in
ip access-group ExtFW out
no ip redirects
ip mtu 1450
ip flow ingress
ip flow egress
ip route-cache policy
ip route-cache flow
ip tcp adjust-mss 1400
ip policy route-map clear-df
autodetect encapsulation ppp
no snmp trap link-status
no peer default ip address
ppp mtu adaptive
ppp authentication ms-chap ms-chap-v2 callin
ppp ipcp dns 194.79.20.12 aaa
ppp ipcp wins reject
ppp ipcp address unique
...Проблема в следующем. Не подключается больше чем 25 пользователей. Прямо уже не знаю куда копать