[cisco-nas] Virtaul-profile feature Set
Ahmad Cheikh Moussa
acm at netuse.de
Tue Mar 8 01:47:40 EST 2005
Hi Oliver,
Is there something I have to think of before I use
"no virtual-profile if-needed" ?
This command means that for every call will be made an
Virtual-Interface. When I made an show vtemplate, the output
show that I have a max of 9 Vtemplate. That means more than 8
simultaneous call is not possible, if I deactivate the if-needed
feature. Is that right ?
jersey02#sh vtemplate
Virtual access subinterface creation is globally enabled
Active Active Subint Pre-clone Pre-clone
Interface Subinterface Capable Available Limit
--------- ------------ ------- --------- ---------
Vt1 0 0 Yes -- --
Usage Summary
Interface Subinterface
--------- ------------
Current in use 1 0
Current free 8 1
Total 9 1
Regards,
Ahmad
Oliver Boehmer (oboehmer) wrote:
> Ahmad Cheikh Moussa <mailto:acm at netuse.de> wrote on Monday, March 07, 2005 4:19 PM:
>
>
>>it is not really a problem. It's a matter of nat.
>>I have configured "ip nat inside" only on the dialer Interface
>>and on the virtual-interface. As the user gets no virtual-interface,
>>the router use the Pri Interface. The "ip nat inside" Feature is not
>>configured on the Pri interface and therefore the user wasn't natted.
>>As I configured on the Pysical interface "ip nat inside" the user was
>>properly natted. Normally I don't wanna configure any ip options on
>>an Physical Interface and therefore it is for me a problem.
>>
>>Any ideas, how to solve that ?
>
>
> "no virtual-profile if-needed" doesn't work?
>
> oli
>
>
>>Oliver Boehmer (oboehmer) wrote:
>>
>>>
>>>>I have a dialin user, which do not get an virtual
>>>>interface. The radius config is relatively easy:
>>>>
>>>>user01 Auth-Type:= Local, User-Password == "****""
>>>> Service-Type = Framed-User,
>>>> Framed-Protocol = PPP,
>>>> cisco-avpair += "ip:addr-pool=POOL_NETYOU_RFC",
>>>>Framed-Routing = None
>>>>
>>>>Any ideas, why this user get no virtual-interface ?
>>>>Wiht 12.2 there was no problems.
>>>
>>>
>>>Apart from the fact that the user is terminated on the physical
>>>line, is there a problem? Can't check right now, but we shouldn't
>>>need an vaccess for this specific user. Is this an ISDN or
>>>Modem/async user? remove the "virtual-profile if-needed" and you'll
>>>get a vaccess for every call..
>>>
>>> oli
>>>
>>>
>>>
>>>>>Ahmad,
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>>I want to configure virtual profiles. These profiles
>>>>>>shoul be used, when they are needed.
>>>>>>Normally the configuration should look like this :
>>>>>>
>>>>>>virtual-profile if-needed
>>>>>>virtual-profile virtual-template 1
>>>>>>virtual-profile aaa
>>>>>>
>>>>>>Since my update from 12.2 to 12.3(T) the line
>>>>>>"virtual-profile aaa" is away.
>>>>>>
>>>>>>Any ideas, why this happen?
>>>>>>Is this command not supported with IP Plus ?
>>>>>>Is there a new way to configure this option ?
>>>>>
>>>>>
>>>>>This command is obsolete, you don't need it anymore. IOS
>>>>>automatically uses a vaccess when it sees per-user attributes in
>>>>>the AAA response..
>>>>>
>>>>> oli
>>>>
>>>>
>>>>--
>>>>Ahmad Cheikh-Moussa
>>>>NetUSE AG
>>>>Dr.-Hell-Straße, 24107 Kiel, Germany
>>>>Telefon: +49 431 2390 400 -- Telefax: +49 431 2390 499
>>>>Service: Service at NetUSE.DE -- http://NetUSE.DE
>>>
>>>/
>>
>>
>>--
>>Ahmad Cheikh-Moussa
>>NetUSE AG
>>Dr.-Hell-Straße, 24107 Kiel, Germany
>>Telefon: +49 431 2390 400 -- Telefax: +49 431 2390 499
>>Service: Service at NetUSE.DE -- http://NetUSE.DE
>
> /
--
Ahmad Cheikh-Moussa
NetUSE AG
Dr.-Hell-Straße, 24107 Kiel, Germany
Telefon: +49 431 2390 400 -- Telefax: +49 431 2390 499
Service: Service at NetUSE.DE -- http://NetUSE.DE/
More information about the cisco-nas
mailing list