[c-nsp] PPPoE Session Limit?

Eugene Vedistchev scaner at global-one.by
Mon Apr 10 12:46:36 EDT 2006


Been there, seen that.
Had same problem with 4+ l2tp tunnels.
 Try moving ip address from Virtual-Template10 to Loopback with /32 mask
Use ip unnumbered Loopback on Virtual-Template


HTH, Eugene

--- Original Message ---

>Here is the config - I took out some of the irrelevant stuff, but enough to
>get a bug picture.
>
>
>service timestamps debug datetime msec
>service timestamps log datetime msec
>service password-encryption
>!
>aaa new-model
>!
>!
>aaa authentication login radius local
>aaa authentication login local local
>aaa authentication ppp default local
>aaa authorization network default local
>aaa accounting network default start-stop group radius
>aaa session-id common
>ip subnet-zero
>ip cef
>!
>!
>virtual-profile virtual-template 10
>vpdn enable
>vpdn session-limit 800
>!         
>vpdn-group bas01
> accept-dialin
>  protocol any
>  virtual-template 10
> session-limit 800
> terminate-from hostname atlngacs70w
> local name BBG-Gateway
> lcp renegotiation on-mismatch
> l2tp tunnel password 7 xxxxxxxxxxxxxxxxx
> l2tp tunnel timeout no-session never
>!
>username user1 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
>username user2 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
>username user3 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
>username user4 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
>username user5 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
>username user6 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
>username user7 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
>!
>interface Loopback1
> no ip address
>!
>interface Vif1
> no ip address
>!
>interface FastEthernet0/0
> ip address xx.xxx.xxx.xx 255.255.255.224
> duplex auto
> speed 100
>!
>interface ATM1/0
> no ip address
> no ip route-cache cef
> no ip route-cache
> shutdown
> no atm ilmi-keepalive
> no scrambling-payload
>!
>interface ATM1/1
> no ip address
> no ip route-cache cef
> no ip route-cache
> no atm ilmi-keepalive
> scrambling-payload
> arp snap
> arp timeout 0
>!
>interface ATM1/1.3 point-to-point
> description Bellsouth BBG Connection
> mtu 9180
> ip address 10.x.x.x 255.255.255.252
> no ip route-cache
> no ip mroute-cache
> pvc 1/37 
>  encapsulation aal5snap
>!
>!
>interface ATM1/2
> no ip address
> shutdown
> no atm ilmi-keepalive
> no scrambling-payload
>!
>interface ATM1/3
> no ip address
> no ip route-cache cef
> no ip route-cache
> no ip mroute-cache
> shutdown
> no atm ilmi-keepalive
> no scrambling-payload
>!
>interface Virtual-Template10
> description Bellsouth BBG Connection
> mtu 9180
> ip address xx.xxx.xxx.193 255.255.255.192
> ip access-group 105 out
> ip mroute-cache
> peer default ip address pool ppp
> keepalive 200
> ppp authentication chap pap
> ppp ipcp dns xx.xxx.xxx.xxx
> ppp ipcp mask 255.255.255.192
>!
>router ospf xxx
> log-adjacency-changes
> redistribute static subnets
> network xx.xxx.xxx.xx  0.0.0.63 area 0
>!
>ip local pool ppp xx.xxx.xxx.200 xx.xxx.xxx.253
>no ip http server
>ip classless
>!
>
>
>
>On 4/10/06 12:12 PM, "Joe Maimon" <jmaimon at ttec.com> wrote:
>
>  
>
>>Graham Wooden wrote:
>>
>>    
>>
>>>Hi all,
>>>
>>>      
>>>
>>>get in. Or if someone drops off, a user that couldn't get in, will now.
>>>
>>>      
>>>
>>It authenticates but doesnt get any IP assigned to it. Can you post your
>>config? Can you check if your IP pool is full?
>>
>>
>>    
>>
>
>
>_______________________________________________
>cisco-nsp mailing list  cisco-nsp at puck.nether.net
>https://puck.nether.net/mailman/listinfo/cisco-nsp
>archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>
>  
>



More information about the cisco-nsp mailing list