Hi! On Tue, May 26, 2009 at 11:34:41AM -0400, up@3.am wrote:
Users are currently authenticating fine and getting assigned IPs from the IP pool as defined in the Cisco NAS. However, I'd like to have a few, select users assigned static IPs from outside that pool, but the Cisco (2811) is simply ignoring the raddb/users file entry for that user and assigning an IP from the pool on the NAS. [...] interface Virtual-Template1 ip unnumbered FastEthernet0/0 ip policy route-map VPN-Client peer match aaa-pools peer default ip address pool vpnpool ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Drop this line
no keepalive ppp encrypt mppe auto ppp authentication pap chap ms-chap ms-chap-v2 ! ip local pool vpnpool 172.16.30.2 172.16.30.254 --------- Here is the raddb/users file entry: --------- testuser Service-Type == Framed-User Framed-Protocol == PPP, Framed-IP-Address = 172.16.1.2, Framed-IP-Netmask = 255.255.255.255, Framed-Compression = Van-Jacobson-TCP-IP
Cisco-AVPair = "ip:addr-pool=vpnpool" Add line above to the DEFAULT user entry. -- Vadim Ostranitsyn (Evil's Flowers, VO45-RIPE, VO15-RIPN) Tomsk Cellular Communications Ltd / Mobile TeleSystems OJSC Work phone: +7(3822)571072, mobile: 500595/+7(913)8200595.