[c-nsp] PPPoE Session Limit?

Joe Maimon jmaimon at ttec.com
Mon Apr 10 12:49:55 EDT 2006


Where in this are you doing PPPoE, looks like its l2tp?

You may want to change lcp renegotiation to always

That virtual-template10 has a fairly large mtu and why do you set an IP 
address there?

Most often its unnumbered to a loopback.

You may also want to add this to the virtual template

ppp ipcp address required

Graham Wooden wrote:

> Here is the config - I took out some of the irrelevant stuff, but enough to
> get a bug picture.
> 
> 
> service timestamps debug datetime msec
> service timestamps log datetime msec
> service password-encryption
> !
> aaa new-model
> !
> !
> aaa authentication login radius local
> aaa authentication login local local
> aaa authentication ppp default local
> aaa authorization network default local
> aaa accounting network default start-stop group radius
> aaa session-id common
> ip subnet-zero
> ip cef
> !
> !
> virtual-profile virtual-template 10
> vpdn enable
> vpdn session-limit 800
> !         
> vpdn-group bas01
>  accept-dialin
>   protocol any
>   virtual-template 10
>  session-limit 800
>  terminate-from hostname atlngacs70w
>  local name BBG-Gateway
>  lcp renegotiation on-mismatch
>  l2tp tunnel password 7 xxxxxxxxxxxxxxxxx
>  l2tp tunnel timeout no-session never
> !
> username user1 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
> username user2 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
> username user3 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
> username user4 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
> username user5 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
> username user6 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
> username user7 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
> !
> interface Loopback1
>  no ip address
> !
> interface Vif1
>  no ip address
> !
> interface FastEthernet0/0
>  ip address xx.xxx.xxx.xx 255.255.255.224
>  duplex auto
>  speed 100
> !
> interface ATM1/0
>  no ip address
>  no ip route-cache cef
>  no ip route-cache
>  shutdown
>  no atm ilmi-keepalive
>  no scrambling-payload
> !
> interface ATM1/1
>  no ip address
>  no ip route-cache cef
>  no ip route-cache
>  no atm ilmi-keepalive
>  scrambling-payload
>  arp snap
>  arp timeout 0
> !
> interface ATM1/1.3 point-to-point
>  description Bellsouth BBG Connection
>  mtu 9180
>  ip address 10.x.x.x 255.255.255.252
>  no ip route-cache
>  no ip mroute-cache
>  pvc 1/37 
>   encapsulation aal5snap
> !
> !
> interface ATM1/2
>  no ip address
>  shutdown
>  no atm ilmi-keepalive
>  no scrambling-payload
> !
> interface ATM1/3
>  no ip address
>  no ip route-cache cef
>  no ip route-cache
>  no ip mroute-cache
>  shutdown
>  no atm ilmi-keepalive
>  no scrambling-payload
> !
> interface Virtual-Template10
>  description Bellsouth BBG Connection
>  mtu 9180
>  ip address xx.xxx.xxx.193 255.255.255.192
>  ip access-group 105 out
>  ip mroute-cache
>  peer default ip address pool ppp
>  keepalive 200
>  ppp authentication chap pap
>  ppp ipcp dns xx.xxx.xxx.xxx
>  ppp ipcp mask 255.255.255.192
> !
> router ospf xxx
>  log-adjacency-changes
>  redistribute static subnets
>  network xx.xxx.xxx.xx  0.0.0.63 area 0
> !
> ip local pool ppp xx.xxx.xxx.200 xx.xxx.xxx.253
> no ip http server
> ip classless
> !
> 
> 
> 
> On 4/10/06 12:12 PM, "Joe Maimon" <jmaimon at ttec.com> wrote:
> 
> 
>>
>>Graham Wooden wrote:
>>
>>
>>>Hi all,
>>>
>>
>>>get in. Or if someone drops off, a user that couldn't get in, will now.
>>>
>>
>>It authenticates but doesnt get any IP assigned to it. Can you post your
>>config? Can you check if your IP pool is full?
>>
>>
> 
> 
> 
> 


More information about the cisco-nsp mailing list