[cisco-bba] Distinct IP over L2TP/VPDN

Krzysztof Adamski k at adamski.org
Thu Jul 14 12:33:03 EDT 2005

On Thu, 14 Jul 2005, Oliver Boehmer (oboehmer) wrote:

> > Problem:
> >
> > DSL users are allocated user at domain details and some (on request) are
> > given fixed IP's. These are provided via our RADIUS on connection.
> > Occasionally users are given the same static IP's ( by mistake J ).
> > When this happens, we see identical next-hop WAN IP's via a 'show
> > users'. Neither user has connectivity since there is major packet
> > loss. Understandable.
> >
> > Question:
> >
> > Is there any way we can change this behaviour on router so that the
> > first user on particular IP works, subsequent users who connect  on
> > same IP have no connectivity at all?
> No, there is nothing you can do about this if you need to safeguard
> against incorrect Radius profiles.. There is no logic in IOS which
> prevents you from assiging the same IP address to two virtual-access
> interfaces.

And IOS should NOT ever enforce this kind of check, since this would be a
valid form of load balancing over two DSL circuits.


More information about the cisco-bba mailing list