[c-nsp] PPPoE Session Limit?
Joe Maimon
jmaimon at ttec.com
Mon Apr 10 12:49:55 EDT 2006
Where in this are you doing PPPoE, looks like its l2tp?
You may want to change lcp renegotiation to always
That virtual-template10 has a fairly large mtu and why do you set an IP
address there?
Most often its unnumbered to a loopback.
You may also want to add this to the virtual template
ppp ipcp address required
Graham Wooden wrote:
> Here is the config - I took out some of the irrelevant stuff, but enough to
> get a bug picture.
>
>
> service timestamps debug datetime msec
> service timestamps log datetime msec
> service password-encryption
> !
> aaa new-model
> !
> !
> aaa authentication login radius local
> aaa authentication login local local
> aaa authentication ppp default local
> aaa authorization network default local
> aaa accounting network default start-stop group radius
> aaa session-id common
> ip subnet-zero
> ip cef
> !
> !
> virtual-profile virtual-template 10
> vpdn enable
> vpdn session-limit 800
> !
> vpdn-group bas01
> accept-dialin
> protocol any
> virtual-template 10
> session-limit 800
> terminate-from hostname atlngacs70w
> local name BBG-Gateway
> lcp renegotiation on-mismatch
> l2tp tunnel password 7 xxxxxxxxxxxxxxxxx
> l2tp tunnel timeout no-session never
> !
> username user1 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
> username user2 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
> username user3 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
> username user4 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
> username user5 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
> username user6 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
> username user7 at domain.local privilege 0 password 7 xxxxxxxxxxxxxxxxx
> !
> interface Loopback1
> no ip address
> !
> interface Vif1
> no ip address
> !
> interface FastEthernet0/0
> ip address xx.xxx.xxx.xx 255.255.255.224
> duplex auto
> speed 100
> !
> interface ATM1/0
> no ip address
> no ip route-cache cef
> no ip route-cache
> shutdown
> no atm ilmi-keepalive
> no scrambling-payload
> !
> interface ATM1/1
> no ip address
> no ip route-cache cef
> no ip route-cache
> no atm ilmi-keepalive
> scrambling-payload
> arp snap
> arp timeout 0
> !
> interface ATM1/1.3 point-to-point
> description Bellsouth BBG Connection
> mtu 9180
> ip address 10.x.x.x 255.255.255.252
> no ip route-cache
> no ip mroute-cache
> pvc 1/37
> encapsulation aal5snap
> !
> !
> interface ATM1/2
> no ip address
> shutdown
> no atm ilmi-keepalive
> no scrambling-payload
> !
> interface ATM1/3
> no ip address
> no ip route-cache cef
> no ip route-cache
> no ip mroute-cache
> shutdown
> no atm ilmi-keepalive
> no scrambling-payload
> !
> interface Virtual-Template10
> description Bellsouth BBG Connection
> mtu 9180
> ip address xx.xxx.xxx.193 255.255.255.192
> ip access-group 105 out
> ip mroute-cache
> peer default ip address pool ppp
> keepalive 200
> ppp authentication chap pap
> ppp ipcp dns xx.xxx.xxx.xxx
> ppp ipcp mask 255.255.255.192
> !
> router ospf xxx
> log-adjacency-changes
> redistribute static subnets
> network xx.xxx.xxx.xx 0.0.0.63 area 0
> !
> ip local pool ppp xx.xxx.xxx.200 xx.xxx.xxx.253
> no ip http server
> ip classless
> !
>
>
>
> On 4/10/06 12:12 PM, "Joe Maimon" <jmaimon at ttec.com> wrote:
>
>
>>
>>Graham Wooden wrote:
>>
>>
>>>Hi all,
>>>
>>
>>>get in. Or if someone drops off, a user that couldn't get in, will now.
>>>
>>
>>It authenticates but doesnt get any IP assigned to it. Can you post your
>>config? Can you check if your IP pool is full?
>>
>>
>
>
>
>
More information about the cisco-nsp
mailing list