Здравствуйте!
Исходные данные: В качестве NAS Cisco7206 (PPPOE сервер)
База данныых абонентов на UTM5 на другом сервере (Win2003Server)
Пул адресов берётся из UTM
Radius - UTM
Проблема в том, что повторно выдаются уже занятые ip адреса.
Если в качестве NAS использую FreeBSD + MPD5 всё работает нормально.
Конфиг 7206
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
no service dhcp
!
hostname name-AC
!
boot-start-marker
boot system flash disk2:c7200p-ipbase-mz.124-15.T12.bin
boot-end-marker
!
enable secret 5 xxxxxxxxxx
!
aaa new-model
aaa session-mib disconnect
!
aaa authentication login default line
aaa authentication login auth_none none
aaa authentication ppp pppoe group radius
aaa authorization network pppoe group radius
aaa accounting delay-start all
aaa accounting update periodic 10
aaa accounting network pppoe start-stop group radius
aaa session-id common
ip cef
!
no ip domain lookup
multilink bundle-name authenticated
async-bootp dns-server x.x.x.x x.x.x.x
vpdn enable
!
bba-group pppoe global
virtual-template 1
ac name name-ac
sessions per-mac limit 1
sessions per-vlan limit 1000
sessions per-mac throttle 10 60 300
sessions auto cleanup
!
interface Loopback0
ip address x.x.x.x x.x.x.x
!
interface GigabitEthernet0/1
description ---- Internet----
ip address x.x.x.x x.x.x.x
rate-limit input access-group 100 128000 4000 4000 conform-action transmit exceed-action drop
duplex auto
speed auto
media-type rj45
negotiation auto
!
interface GigabitEthernet0/2
description ---- 802.1q Interface for VLAN Aggregation ----
mtu 1504
no ip address
duplex auto
speed auto
media-type rj45
no negotiation auto
!
interface GigabitEthernet0/2.10
description ---- PPPoE Clients Subinterface VLAN 10 ----
encapsulation dot1Q 10
ip mtu 1500
pppoe enable group global
!
interface GigabitEthernet0/2.12
description ---- PPPoE Clients Subinterface VLAN 12 ----
encapsulation dot1Q 12
ip mtu 1500
pppoe enable group global
!
....
!
interface Virtual-Template1
description ---- PPPoE Dial-Up ----
ip unnumbered Loopback0
ip mtu 1492
ip virtual-reassembly
no peer default ip address
ppp authentication chap pppoe
ppp authorization pppoe
ppp accounting pppoe
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 x.x.x.x
!
ip radius source-interface GigabitEthernet0/2.23
logging alarm informational
!
access-list 1 permit x.x.x.x
access-list 100 permit icmp any any
!
radius-server host x.x.x.x auth-port 1812 acct-port 1813
radius-server retransmit 5
radius-server timeout 15
radius-server optional-passwords
radius-server key 7 xxxxxxxxxxxx
radius-server vsa send accounting
radius-server vsa send authentication
UTM5 + Cisco 7206 Выдаётся занятый IP адрес
вот ссылка viewtopic.php?t=7943