aaa authentication ppp PPPoE group ISG-RADIUS
aaa authorization network PPPoE group ISG-RADIUS
aaa accounting network PPPoE start-stop group ISG-RADIUS
aaa accounting delay-start all
aaa accounting update periodic 1
!
aaa server radius dynamic-author
client 10.0.0.1
server-key 7 131612111909102922372B3C
port 3799
auth-type any
!
bba-group pppoe PPPoE
virtual-template 1
sessions per-mac limit 2 ! Сделано именно так, чтобы сессия пересоздавалась, не ожидая пока Циска убьет старую сессию
sessions per-vlan limit 1000
sessions auto cleanup
! Client interface
interface Port-channel1
description To-SW-Core
no ip address
pppoe enable group PPPoE
!
interface Virtual-Template1
mtu 1492
ip unnumbered Loopback1
no ip proxy-arp
ip nat inside
ip verify unicast source reachable-via rx
ip tcp adjust-mss 1452
no logging event link-status
peer default ip address pool default
keepalive 30 4
ppp mtu adaptive
ppp authentication chap PPPoE
ppp authorization PPPoE
ppp accounting PPPoE
ppp ipcp dns 8.8.8.8
ppp ipcp mask 255.255.255.255
ppp ipcp address unique
ppp timeout idle 2592000
|