Hi all,
How can I use a Cisco router as PPTP-Calls terminator without using a RADIUS server? Right now I came up with the following configuration that works partially:
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
aaa new-model
aaa authentication login default local
aaa authentication login PPTP-Authentication local
aaa authentication ppp PPTP-Authentication local
aaa authorization network PPTP-Authentication local
aaa attribute list 50K-Limit
attribute type sub-policy-out "50K-Limit" service vpdn
aaa session-id common
ip cef
vpdn enable
vpdn authen-before-forward
vpdn-group DefaultVPDN
! Default PPTP VPDN group
accept-dialin
protocol pptp
virtual-template 1
local name PPTP-Authentication
username test1 password 0 test1
username test1 aaa attribute list 50K-Limit
policy-map 50K-Limit
class class-default
bandwidth 50
interface Ethernet0
description LAN Interface
interface Virtual-Template1
ip unnumbered Ethernet0
ip nat inside
ip virtual-reassembly
peer default ip address pool DIAL-IN
vpdn authorization PPTP-Authentication
ppp encrypt mppe auto required
ppp authentication ms-chap ms-chap-v2
ip local pool DIAL-IN 192.168.0.1 192.168.3.254
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
PPTP works just fine, all users are able to connect BUT - There is no policy-map attached to any of those VI's.
How can I attach a policy-map to local users using local AAA server?
Regards,
Alex.
