I want to support PPTP remote access for multiple communities of customers. Each community has an MPLS VPN on the core MPLS network. I have tried to configure multiple VPDN groups, echo mapped to its own Virtual-Template interface, each group supporting PPTP dialin. The problem is that all PPTP connections get an address via the "default" VPDN group (the one marked "! Default PPTP VPDN group"). I want to place a PPTP client on their correct VRF based on the Radius group they are in. I am using CiscoSecure ACS 3.2 on Windows 2000 as the authentication server. I am using a 1760 for testing as the PPTP server.
Here's part of my config. Can anyone help?
aaa authentication login 00101-data group radius
aaa authentication login 00102-data group radius
aaa authorization network 00101-data group radius
aaa authorization network 00102-data group radius
!
ip vrf 00101-data
rd 101:10
route-target export 101:10
route-target import 101:10
!
ip vrf 00102-data
rd 102:10
route-target export 102:10
route-target import 102:10
!
vpdn enable
!
vpdn-group 00101-data
! Default PPTP VPDN group
accept-dialin
protocol pptp
virtual-template 101
vpn vrf 00101-data
!
vpdn-group 00102-data
accept-dialin
protocol pptp
virtual-template 102
vpn vrf 00102-data
!
interface FastEthernet0/0.8
description This is the interface where PPTP connections come in
encapsulation dot1Q 8
ip address 1.1.1.1 255.255.255.0
!
interface FastEthernet0/0.201
description msp-pe01 vrf 00101-data
encapsulation dot1Q 201
ip vrf forwarding 00101-data
ip address 10.208.1.5 255.255.255.252
no cdp enable
!
interface FastEthernet0/0.202
description msp-pe01 vrf 00102-data
encapsulation dot1Q 202
ip vrf forwarding 00102-data
ip address 10.208.1.9 255.255.255.252
no cdp enable
!
interface Virtual-Template101
ip vrf forwarding 00101-data
ip unnumbered FastEthernet0/0.201
ip tcp header-compression
peer default ip address pool 00101-data-pool
no keepalive
compress mppc
vpdn authorization 00101-data
ppp max-bad-auth 5
ppp encrypt mppe auto
ppp authentication ms-chap ms-chap-v2 00101-data
ppp ipcp dns 10.250.4.2 10.250.4.3
ppp ipcp wins 10.250.4.2 10.250.4.3
!
interface Virtual-Template102
ip vrf forwarding 00102-data
ip unnumbered FastEthernet0/0.202
ip tcp header-compression
peer default ip address pool 00102-data-pool
no keepalive
compress mppc
vpdn authorization 00102-data
ppp max-bad-auth 5
ppp encrypt mppe auto
ppp authentication ms-chap ms-chap-v2 00102-data
ppp ipcp dns 10.250.4.2 10.250.4.3
ppp ipcp wins 10.250.4.2 10.250.4.3
!
ip local pool 00101-data-pool 10.248.1.3 10.248.1.30
ip local pool 00102-data-pool 10.248.1.32 10.248.1.63
