hi you right
so i think the problem is mismatch between dhcp pool mask and access list mask.
your dhcp pool mask is /29 but your access list wild card shows /24 mask.
example of working nat:
note access-list number (10) and nat pool:
ip nat pool...
solution 1 : give the rejected users an IP pool instead of rejecting them , ex:192.168.20.0/24
then write down a route-map to send their traffic to your portal
solution 2: if you use Cisco-ISG and configured ISG attributes on freeradius, you can us...
hi
you have a BGP neighbor for your up link connection, first of let they know, and at the same time you will change the as number and the upstream provider will change the as number of neighbour