Hello !
it's a second time that I ask this question but first time I didn't get a satisfactory answer.
I'm using a vpdn connection from outside a company to Cisco 831 router which act as a end of a vpn tunnel.
generally speaking vpdn configuration looks like that:
- usernames and password are kept on the router locally
- for connection I use Windows built-in vpn client.
- when client is authenticated router assigns it ip address form local pool which is also kept on the router.
I'd like to achieve the following: depending on the ip address from which the remote client connects the router would assign it different local ip address. source addresses are configured in access lists.
Now remote clients always get the same local ip address irrespective of their source. The default VPDN group is always used for the connection.
This is the interesting part of the configuration:
----------
username qad password 7 <removed>
username admin password 7 <removed>
username dst password 7 <removed>
aaa authentication login default local
aaa authentication ppp default local
aaa authorization network default local
vpdn enable
vpdn logging
vpdn-group 1
! Default PPTP VPDN group
accept-dialin
protocol pptp
virtual-template 1
source-ip <public ip of the router>
!
vpdn-group 2
accept-dialin
protocol pptp
virtual-template 2
source-ip <public ip of the router>
interface Ethernet1
ip address <public ip of the router> <mask>
ip access-group 150 in
ip nat outside
ip virtual-reassembly
service-policy output inbound-http
duplex auto
no cdp enable
interface Virtual-Template1
ip unnumbered Ethernet1
ip access-group local1 in
ip mroute-cache
peer default ip address pool local1
no keepalive
ppp encrypt mppe auto required
ppp authentication ms-chap ms-chap-v2
!
interface Virtual-Template2
ip unnumbered Ethernet1
ip access-group local2 in
ip mroute-cache
peer default ip address pool local2
no keepalive
ppp encrypt mppe auto required
ppp authentication ms-chap ms-chap-v2
!
ip local pool local1 192.168.2.1 192.168.2.5
ip local pool local2 192.168.3.1 192.168.3.5
ip access-list extended local1
permit ip 192.168.2.1 0.0.0.5 log
ip access-list extended local2
permit ip 192.168.3.1 0.0.0.5 log
access-list 150 permit ip <client 1 ip address> <mask> <public ip of the router> <mask> log
access-list 150 permit ip <client 2 ip address> <mask> <public ip of the router> <mask> log
-----------------------
Thanks for any ideas.
