Hello ,
I have an old cisco 1800 runing VPDN configuration and I change it to a new ISR4000.
All the current configuration works including the VPDN , users dialup , request is forwared to the local radius server . they are approved by the radius and get an ip address from it and a new subif as a virtual access is created.
From that moment they cannot ping the application server behind my router and cannot ping each other through my router.
If I connect the old 1800 back it works again.
Ths script is the same , minor changes for interfaces and radius cli.
Any idea ?
triple A commands
================================
aaa new-model
!
!
aaa group server radius RADIUS_SERVERS
server name primary
server name backup
!
aaa authentication login default local
aaa authentication ppp default group RADIUS_SERVERS local
aaa authorization network default group RADIUS_SERVERS local
aaa accounting auth-proxy default start-stop group RADIUS_SERVERS
!
!
!
aaa session-id common
!
VPDN commands
=============================================
vpdn enable
!
vpdn-group 1
! Default L2TP VPDN group
accept-dialin
protocol l2tp
virtual-template 100
lcp renegotiation on-mismatch
l2tp tunnel password 7 *************
!
Virtual Template interface
================================================
!
interface Virtual-Template100
mtu 1460
ip unnumbered GigabitEthernet0/0/0
no peer default ip address
ppp authentication pap
Local radius
==================================
radius-server retransmit 2
radius-server timeout 2
radius-server deadtime 10
radius-server domain-stripping delimiter @
radius-server unique-ident 8
!
radius server primary
address ipv4 192.168.16.6 auth-port 1645 acct-port 1646
key 7 ***********************
!
radius server backup
address ipv4 192.168.16.7 auth-port 1645 acct-port 1646
key 7 **********************
!
