[c-nsp] assigning pptp users to specific vpdn groups (or virtual-templates)

Roy Blamski roy at santaba.com
Fri Aug 3 14:52:53 EDT 2007


I'm currently using the following setup on a 2851 (12.4) for incoming pptp
connections:

vpdn-group pptp-dialin
! Default PPTP VPDN group
 description PPTP dialin users
 accept-dialin
  protocol pptp
  virtual-template 1

interface Virtual-Template1
 ip unnumbered GigabitEthernet0/0
 ip nat inside
 ip virtual-reassembly
 peer default ip address pool pptp-pool
 ppp encrypt mppe auto
 ppp authentication ms-chap-v2 ms-chap

auth is done via a radius server.  i can assign users to specific address
pools via:

Cisco-AVPair := "ip:addr-pool=pptp-pool"

but is there a way to assign them to different virtual templates?  I had
thought that this would do the trick:
Cisco-AVPair := "vpdn:vpdn-vtemplate=10"

but it doesn't seem to work (i did have a virtual-template10).  is what i
want to do possible?

thanks.


More information about the cisco-nsp mailing list