Unknown vpdn syslog error due to aaa disconnect code 24

Добрый день Коллеги.

В офисе стоит Cisco 2951 с поднятым PPTP сервером (нужен именно pptp). Клиенты подключаются с через сотовые сети и домашний интернет (NAT).
Проблема: находясь дома, за NATом, возможно установить только 1у сессию с офисом! При попытке подключить 2ое устройство, вылетает ошибка 619 (windows). До этого стоял Mikrotik c PPTP сервером, после Виндовый сервак, таких проблем не было. Подскажите как победить???

!
! Last configuration change at 11:47:48 MSK Sat Jun 13 2015
version 15.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ol-gw1
!
boot-start-marker
boot-end-marker
!
!
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication ppp default local-case
!
!
!
!
!
aaa session-id common
clock timezone MSK 3 0
clock calendar-valid
!
!
!
ip cef
!
!
!
!


!
!
!
!
ip domain name test.ru
ip name-server 10.4.0.1
ip name-server 10.4.0.7
ipv6 multicast rpf use-bgp
no ipv6 cef
!
multilink bundle-name authenticated
!
async-bootp dns-server 10.4.0.1 10.4.0.7
vpdn enable
!
vpdn-group VPDN-PPTP
 ! Default PPTP VPDN group
 accept-dialin
  protocol pptp
  virtual-template 1
 pptp tunnel echo 10
 ip pmtu
 ip mtu adjust
!
!
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
license udi pid CISCO2951/K9 sn FTX1716AL8W
hw-module pvdm 0/0
!
hw-module pvdm 0/1
!
!
!
username root privilege 15 secret 4 xxxx
username Testuser privilege 0 password 0 Testpass

!
redundancy
!
!
!
!
!
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh version 2
csdb tcp synwait-time 30
csdb tcp idle-time 3600
csdb tcp finwait-time 5
csdb tcp reassembly max-memory 1024
csdb tcp reassembly max-queue-length 16
csdb udp idle-time 30
csdb icmp idle-time 10
csdb session max-session 65535
! 
!
!
!
!
!
!
!
!
interface Loopback0
 description PPTP
 ip address 10.4.6.254 255.255.255.0
!
interface Tunnel0
 description GRE_PE
 ip address 10.3.1.254 255.255.255.252
 ip nat inside
 ip virtual-reassembly in
 tunnel source 10.3.0.254
 tunnel destination 10.3.0.253
!
interface Embedded-Service-Engine0/0
 no ip address
 shutdown
!
interface GigabitEthernet0/0
 ip address xxx.xxx.xxx.85 255.255.255.192 secondary
 ip address xxx.xxx.xxx.84 255.255.255.192
 ip nat outside
 ip virtual-reassembly in
 duplex auto
 speed auto
 no cdp enable
!
interface GigabitEthernet0/1
 no ip address
 duplex auto
 speed auto
!
interface GigabitEthernet0/1.10
 description Server_farm
 encapsulation dot1Q 10
 ip address 10.4.0.254 255.255.255.0
 ip nat inside
 ip virtual-reassembly in
!
interface GigabitEthernet0/1.11
 description Manage
 encapsulation dot1Q 11
 ip address 10.4.1.254 255.255.255.0
!
interface GigabitEthernet0/1.12
 description Avaya
 encapsulation dot1Q 12
 ip address 10.4.2.254 255.255.255.0
 ip nat inside
 ip virtual-reassembly in
!
interface GigabitEthernet0/1.13
 description LAN
 encapsulation dot1Q 13
 ip address 10.4.3.254 255.255.255.0
 ip nat inside
 ip virtual-reassembly in
!
interface GigabitEthernet0/1.14
 description WLAN
 encapsulation dot1Q 14
 ip address 10.4.4.254 255.255.255.0
 ip nat inside
 ip virtual-reassembly in
!
interface GigabitEthernet0/1.15
 description Guest_WLAN
 encapsulation dot1Q 15
 ip address 10.4.5.254 255.255.255.0
 ip nat inside
 ip virtual-reassembly in
!
interface GigabitEthernet0/2
 description Point-to-Point
 ip address 10.3.0.254 255.255.255.252
 duplex auto
 speed auto
!
interface GigabitEthernet0/0/0
 no ip address
 shutdown
!
interface GigabitEthernet0/0/1
 no ip address
 shutdown
!
interface GigabitEthernet0/0/2
 no ip address
 shutdown
!
interface GigabitEthernet0/0/3
 no ip address
 shutdown
!
interface Virtual-Template1
 description PPTP
 ip unnumbered Loopback0
 ip nat inside
 ip virtual-reassembly in
 autodetect encapsulation ppp
 peer ip address forced
 peer default ip address pool PPTP
 no keepalive
 ppp encrypt mppe auto
 ppp authentication ms-chap-v2
!
interface Vlan1
 no ip address
!
!
ip local pool PPTP 10.4.6.2 10.4.6.50
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat pool OL xxx.xxx.xxx.85 xxx.xxx.xxx.85 netmask 255.255.255.192
ip nat inside source list 150 pool OL overload
ip nat inside source static tcp 10.4.0.2 25 xxx.xxx.xxx.85 25 extendable
ip nat inside source static tcp 10.4.0.2 443 xxx.xxx.xxx.85 443 extendable
ip route 0.0.0.0 0.0.0.0 xxx.xxx.xxx.65
ip route 10.7.0.0 255.255.0.0 10.3.1.253
!


!
!
nls resp-timeout 1
cpd cr-id 1
!
access-list 150 permit ip 10.4.0.0 0.0.0.255 any
access-list 150 permit ip 10.4.2.0 0.0.0.255 any
access-list 150 permit ip 10.4.3.0 0.0.0.255 any
access-list 150 permit ip 10.4.4.0 0.0.0.255 any
access-list 150 permit ip 10.4.5.0 0.0.0.255 any
access-list 150 permit ip 10.4.6.0 0.0.0.255 any
access-list 150 permit ip 10.7.3.0 0.0.0.255 any
access-list 150 permit ip 10.7.4.0 0.0.0.255 any
access-list 150 permit ip 10.7.5.0 0.0.0.255 any
access-list 150 permit ip 10.7.2.0 0.0.0.255 any
!
!
!
control-plane
!
 !
 !
 !
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
gatekeeper
 shutdown
!
!
!
line con 0
 privilege level 15
line aux 0
line 2
 no activation-character
 no exec
 transport preferred none
 transport input all
 transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh
 stopbits 1
line vty 0 4
 privilege level 15
 transport input ssh
 transport output ssh
!
scheduler allocate 20000 1000

!
end

UPD: deb
Jun 13 10:35:46.158: VPDN Received L2TUN socket message <xCRQ - Session Incoming>
Jun 13 10:35:46.158: VPDN uid:12 L2TUN socket session accept requested
Jun 13 10:35:46.158: VPDN uid:12 Setting up dataplane for L2-L2, no idb
Jun 13 10:35:46.158: VPDN Received L2TUN socket message <xCCN - Session Connected>
Jun 13 10:35:46.158: VPDN uid:12 VPDN session up
Jun 13 10:35:46.162: ppp12 PPP: Using AAA Unique Id = 1B
Jun 13 10:35:46.162: ppp12 PPP: Authorization NOT required
Jun 13 10:35:46.162: ppp12 PPP: Using vpn set call direction
Jun 13 10:35:46.162: ppp12 PPP: Treating connection as a callin
Jun 13 10:35:46.162: ppp12 PPP: Session handle[8600000C] Session id[12]
Jun 13 10:35:46.162: ppp12 PPP LCP: negotiation authorized = 1, tacacs author = 0
Jun 13 10:35:48.166: ppp12 PPP LCP: neg is authorized, processing CP UP event
Jun 13 10:36:08.326: ppp12 PPP: Sending Acct Event[Down] id[1B]
Jun 13 10:36:08.326: ppp12 PPP: Clearing AAA Unique Id = 1B
Jun 13 10:36:08.326: VPDN uid:12 disconnect (AAA) IETF: 9/nas-error Ascend: 24/PPP LCP Fail
Jun 13 10:36:08.326: VPDN Unknown vpdn syslog error due to AAA disconnect code 24
Jun 13 10:36:08.326: VPDN uid:12 vpdn shutdown session, result=2, error=6, vendor_err=0, syslog_error_code=0, syslog_key_type=1
Jun 13 10:36:08.326: VPDN uid:12 VPDN/AAA: accounting stop sent
Jun 13 10:36:08.326: VPDN Received L2TUN socket message <CDN - Session Disconnected>

15.05.2014, 12:04. Показов 2573. Ответов 0

aaa authentication ppp default local
aaa authorization network default local
.............
vpdn enable
!
vpdn-group VPN
 ! Default PPTP VPDN group
 accept-dialin
  protocol pptp
  virtual-template 1
 l2tp tunnel timeout no-session 15
 ip pmtu
 ip mtu adjust
.........
username qwertyuiop privilege 0 password 7 xxxxxxxx
...........
interface Virtual-Template1
 ip unnumbered GigabitEthernet0/1
 zone-member security ESKO
 peer default ip address pool PPTP-VPN
 no keepalive
 ppp encrypt mppe auto required
 ppp authentication ms-chap ms-chap-v2 chap
..........
ip local pool PPTP-VPN 192.168.1.221 192.168.1.230
..........

ip access-list extended SELF-OPENED
.....
 permit tcp any any eq 1723
 permit gre any any

sh debugging
PPP:
  PPP packet display debugging is on
VPN:
  VPDN events debugging is on
  VPDN errors debugging is on
  VPDN packet debugging is on
  VPN disconnect debugging is on

Router#
May 14 20:12:12.818: VPDN Received L2TUN socket message <xCRQ - Session Incoming>
May 14 20:12:12.822: VPDN uid:51 L2TUN socket session accept requested
May 14 20:12:12.822: VPDN uid:51 Setting up dataplane for L2-L2, no idb
May 14 20:12:12.822: VPDN Received L2TUN socket message <xCCN - Session Connected>
May 14 20:12:12.822: VPDN uid:51 VPDN session up
Router#
May 14 20:12:14.810: PPTP:(Tnl0:Sn58731):PROCESS Into tunnel: Sending 59 byte ppp pak
May 14 20:12:14.810: L2X:IP socket write 59 bytes, xx.xx.xx.xx to yy.yy.yy.yy, prot 47
Router#
May 14 20:12:16.826: PPTP:(Tnl0:Sn58731):PROCESS Into tunnel: Sending 59 byte ppp pak
May 14 20:12:16.826: L2X:IP socket write 59 bytes, xx.xx.xx.xx to yy.yy.yy.yy, prot 47
Router#
May 14 20:12:18.842: PPTP:(Tnl0:Sn58731):PROCESS Into tunnel: Sending 59 byte ppp pak
May 14 20:12:18.842: L2X:IP socket write 59 bytes, xx.xx.xx.xx to yy.yy.yy.yy, prot 47
Router#
May 14 20:12:20.858: PPTP:(Tnl0:Sn58731):PROCESS Into tunnel: Sending 59 byte ppp pak
May 14 20:12:20.858: L2X:IP socket write 59 bytes, xx.xx.xx.xx to yy.yy.yy.yy, prot 47
Router#
May 14 20:12:22.874: PPTP:(Tnl0:Sn58731):PROCESS Into tunnel: Sending 59 byte ppp pak
May 14 20:12:22.874: L2X:IP socket write 59 bytes, xx.xx.xx.xx to yy.yy.yy.yy, prot 47
Router#
May 14 20:12:24.890: PPTP:(Tnl0:Sn58731):PROCESS Into tunnel: Sending 59 byte ppp pak
May 14 20:12:24.890: L2X:IP socket write 59 bytes, xx.xx.xx.xx to yy.yy.yy.yy, prot 47
Router#
May 14 20:12:26.906: PPTP:(Tnl0:Sn58731):PROCESS Into tunnel: Sending 59 byte ppp pak
May 14 20:12:26.906: L2X:IP socket write 59 bytes, xx.xx.xx.xx to yy.yy.yy.yy, prot 47
Router#
May 14 20:12:28.922: PPTP:(Tnl0:Sn58731):PROCESS Into tunnel: Sending 59 byte ppp pak
May 14 20:12:28.922: L2X:IP socket write 59 bytes, xx.xx.xx.xx to yy.yy.yy.yy, prot 47
Router#
May 14 20:12:30.938: PPTP:(Tnl0:Sn58731):PROCESS Into tunnel: Sending 59 byte ppp pak
May 14 20:12:30.938: L2X:IP socket write 59 bytes, xx.xx.xx.xx to yy.yy.yy.yy, prot 47
Router#
May 14 20:12:32.954: PPTP:(Tnl0:Sn58731):PROCESS Into tunnel: Sending 59 byte ppp pak
May 14 20:12:32.954: L2X:IP socket write 59 bytes, xx.xx.xx.xx to yy.yy.yy.yy, prot 47
Router#
May 14 20:12:34.970: VPDN uid:51 disconnect (AAA) IETF: 9/nas-error Ascend: 24/PPP LCP Fail
May 14 20:12:34.970: VPDN Unknown vpdn syslog error due to AAA disconnect code 24
May 14 20:12:34.970: VPDN uid:51 vpdn shutdown session, result=2, error=6, vendor_err=0, syslog_error_code=0, syslog_key_type=1
May 14 20:12:34.970: VPDN uid:51 VPDN/AAA: accounting stop sent
May 14 20:12:34.970: VPDN Received L2TUN socket message <CDN - Session Disconnected>
May 14 20:12:34.970: VPDN Failed to get session from socket handle 00001032

zone-member security ESKO

__________________
Помощь в написании контрольных, курсовых и дипломных работ, диссертаций здесь

0

Hey Guys,

Can you please help me debug this lab?I am using Virtual routers and CSR1000v in EVE-NG to create a test LNS, LAC, and a CPE setup with the goal of CPE getting a Dialer IP on the CPE over VPDN.

The IOS virtual router «PPPoE_IOS» has no issues getting an IP but I can’t get CSR to work.

I am not sure what I am doing wrong, can you guys see anything?

CPE Debug:

*Jan 30 03:38:51.685: %LINK-3-UPDOWN: Interface GigabitEthernet1, changed state to up

*Jan 30 03:38:52.686: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1, changed state to up

*Jan 30 03:39:42.649: %DIALER-6-BIND: Interface Vi2 bound to profile Di100

*Jan 30 03:39:42.654: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to up

*Jan 30 03:39:42.655: Vi2 PPP: Sending cstate UP notification

*Jan 30 03:39:42.655: Vi2 PPP: Processing CstateUp message

*Jan 30 03:39:42.661: PPP: Alloc Context [7FB267ECAF88]

*Jan 30 03:39:42.661: ppp3 PPP: Phase is ESTABLISHING

*Jan 30 03:39:42.662: Vi2 PPP: Using dialer call direction

*Jan 30 03:39:42.662: Vi2 PPP: Treating connection as a callout

*Jan 30 03:39:42.663: Vi2 PPP: Session handle[21000003] Session id[3]

*Jan 30 03:39:42.663: Vi2 LCP: Event[OPEN] State[Initial to Starting]

*Jan 30 03:39:42.663: Vi2 PPP: No remote authentication for call-out

*Jan 30 03:39:42.664: Vi2 LCP: O CONFREQ [Starting] id 1 len 14

*Jan 30 03:39:42.669: Vi2 LCP: MRU 1492 (0x010405D4)

*Jan 30 03:39:42.669: Vi2 LCP: MagicNumber 0x1ECF992F (0x05061ECF992F)

*Jan 30 03:39:42.670: Vi2 LCP: Event[UP] State[Starting to REQsent]

*Jan 30 03:39:42.677: Vi2 LCP: I CONFREQ [REQsent] id 1 len 18

*Jan 30 03:39:42.677: Vi2 LCP: MRU 1492 (0x010405D4)

*Jan 30 03:39:42.677: Vi2 LCP: AuthProto PAP (0x0304C023)

*Jan 30 03:39:42.678: Vi2 LCP: MagicNumber 0x035E8BC5 (0x0506035E8BC5)

*Jan 30 03:39:42.678: Vi2 LCP: O CONFACK [REQsent] id 1 len 18

*Jan 30 03:39:42.678: Vi2 LCP: MRU 1492 (0x010405D4)

*Jan 30 03:39:42.679: Vi2 LCP: AuthProto PAP (0x0304C023)

*Jan 30 03:39:42.679: Vi2 LCP: MagicNumber 0x035E8BC5 (0x0506035E8BC5)

*Jan 30 03:39:42.680: Vi2 LCP: Event[Receive ConfReq+] State[REQsent to ACKsent]

*Jan 30 03:39:42.680: Vi2 LCP: I CONFACK [ACKsent] id 1 len 14

*Jan 30 03:39:42.680: Vi2 LCP: MRU 1492 (0x010405D4)

*Jan 30 03:39:42.681: Vi2 LCP: MagicNumber 0x1ECF992F (0x05061ECF992F)

*Jan 30 03:39:42.681: Vi2 LCP: Event[Receive ConfAck] State[ACKsent to Open]

*Jan 30 03:39:42.691: Vi2 PPP: Phase is AUTHENTICATING, by the peer

*Jan 30 03:39:42.691: Vi2 PAP: Using hostname from interface PAP

*Jan 30 03:39:42.691: Vi2 PAP: Using password from interface PAP

*Jan 30 03:39:42.692: Vi2 PAP: O AUTH-REQ id 1 len 26 from "sdwan1@cisco.com"

*Jan 30 03:39:42.693: Vi2 LCP: State is Open

*Jan 30 03:39:42.864: Vi2 LCP: I TERMREQ [Open] id 1 len 4

*Jan 30 03:39:42.864: Vi2 PPP DISC: Received LCP TERMREQ from peer

*Jan 30 03:39:42.865: PPP: NET STOP send to AAA.

*Jan 30 03:39:42.865: Vi2 PPP: Phase is TERMINATING

*Jan 30 03:39:42.866: Vi2 LCP: O TERMACK [Open] id 1 len 4

*Jan 30 03:39:42.868: Vi2 LCP: Event[Receive TermReq] State[Open to Stopping]

*Jan 30 03:39:42.934: %DIALER-6-UNBIND: Interface Vi2 unbound from profile Di100

*Jan 30 03:39:42.942: Vi2 PPP: Block vaccess from being freed [0x10]

*Jan 30 03:39:42.942: Vi2 LCP: Event[DOWN] State[Stopping to Starting]

*Jan 30 03:39:42.943: ppp_session_ntfy delete, topswidb Vi2, va Vi2, platform notify 0

*Jan 30 03:39:42.944: Vi2 PPP: Unlocked by [0x10] Still Locked by [0x0]

*Jan 30 03:39:42.944: Vi2 PPP: Free previously blocked vaccess

*Jan 30 03:39:42.947: Vi2 PPP: Phase is DOWN

*Jan 30 03:39:42.948: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to down

*Jan 30 03:39:42.948: Vi2 PPP: Sending cstate DOWN notification

*Jan 30 03:39:42.949: Vi2 PPP: Processing CstateDown message

Debug LAC:

*Jan 30 04:34:13.362: VPDN uid:385 L2TUN socket session connect requested

*Jan 30 04:34:13.363: VPDN uid:385 Setting up dataplane for L2-L2, no idb

*Jan 30 04:34:13.396: VPDN Received L2TUN socket message <SLI - Session Circuit Status>

*Jan 30 04:34:13.397: VPDN uid:385 cannot find swidb for session

*Jan 30 04:34:13.415: VPDN Received L2TUN socket message <xCCN - Session Connected>

*Jan 30 04:34:13.416: VPDN uid:385 VPDN session up

*Jan 30 04:34:13.514: VPDN Received L2TUN socket message <CDN - Session Disconnected>

*Jan 30 04:34:13.514: VPDN uid:385 disconnect (L2X) IETF: 18/host-request Ascend: 66/VPDN Local PPP Disconnect

*Jan 30 04:34:13.515: VPDN uid:385 vpdn shutdown session, result=2, error=6, vendor_err=0, syslog_error_code=2, syslog_key_type=1

Debug LNS:

Jan 30 04:42:39.940: VPDN Received L2TUN socket message <xCRQ - Session Incoming>

*Jan 30 04:42:39.943: VPDN uid:26 L2TUN socket session accept requested

*Jan 30 04:42:39.943: VPDN uid:26 Setting up dataplane for L2-L2, no idb

*Jan 30 04:42:39.986: VPDN Received L2TUN socket message <xCCN - Session Connected>

*Jan 30 04:42:39.993: VPDN uid:26 VPDN session up

*Jan 30 04:42:40.041: PPP: Alloc Context [F6B5F20]

*Jan 30 04:42:40.042: ppp26 PPP: Phase is ESTABLISHING

*Jan 30 04:42:40.045: ppp26 LCP: Event[Jam Start] State[Initial to Closed]

*Jan 30 04:42:40.046: ppp26 LCP: I FORCED rcvd CONFACK len 18

*Jan 30 04:42:40.046: ppp26 LCP: MRU 1492 (0x010405D4)

*Jan 30 04:42:40.046: ppp26 LCP: AuthProto PAP (0x0304C023)

*Jan 30 04:42:40.047: ppp26 LCP: MagicNumber 0x03984EA6 (0x050603984EA6)

*Jan 30 04:42:40.048: ppp26 LCP: I FORCED sent CONFACK len 14

*Jan 30 04:42:40.048: ppp26 LCP: MRU 1492 (0x010405D4)

*Jan 30 04:42:40.048: ppp26 LCP: MagicNumber 0x1ED0953F (0x05061ED0953F)

*Jan 30 04:42:40.048: ppp26 PPP: LCP not accepting sent CONFACK

*Jan 30 04:42:40.049: ppp26 LCP: O TERMREQ [Closed] id 1 len 4

*Jan 30 04:42:40.051: ppp26 PPP DISC: LCP Jam options rejected

*Jan 30 04:42:40.052: ppp26 PPP: Sending Acct Event[Down] id[27]

*Jan 30 04:42:40.052: PPP: NET STOP send to AAA.

*Jan 30 04:42:40.053: ppp26 LCP: Event[DOWN] State[Closed to Initial]

*Jan 30 04:42:40.056: ppp26 PPP: Phase is DOWN

*Jan 30 04:42:40.060: VPDN uid:26 disconnect (AAA) IETF: 9/nas-error Ascend: 29/PPP LCP Close

*Jan 30 04:42:40.060: VPDN Unknown vpdn syslog error due to AAA disconnect code 29

*Jan 30 04:42:40.061: VPDN uid:26 vpdn shutdown session, result=2, error=6, vendor_err=0, syslog_error_code=0, syslog_key_type=1

*Jan 30 04:42:40.061: VPDN uid:26 Unknown vpdn failure error due to AAA disconnect code 29

*Jan 30 04:42:40.061: VPDN uid:26 VPDN/AAA: accounting stop sent

There is nothing special on the CSR config wise and the username is on the LNS:

interface Dialer1

ip address negotiated

encapsulation ppp

dialer pool 1

ppp pap sent-username sdwan1@cisco.com password 0 test

end

interface GigabitEthernet1

no ip address

negotiation auto

pppoe enable group global

pppoe-client dial-pool-number 1

no mop enabled

no mop sysid

end

*** I have no idea why, but after some restarts issue resolved itself somehow :/ ***

457

Caveats for Cisco IOS Release 12.4T

OL-8003-09 Rev. Z0

  Resolved Caveats—Cisco IOS Release 12.4(20)T4

Conditions: Occurs on a Cisco 800 router running Cisco IOS Release 12.4(24.6)T9.

Workaround: There is no workaround. 

•

CSCsz85919

Symptoms: A router reloads with a SegV exception.

Conditions: The symptom is observed with a router that is running Cisco IOS Release 12.4(20)T2 
with both NAT and output ACLs configured. It occurs when the packet size changes due to NAT (this 
can happen with SIP/H.323 etc.).

Workaround: There is no workaround. 

•

CSCsz86837

Symptoms: After few days of normal operations, Cisco L2TP network server (LNS) starts rejecting 
significant percentage of L2TP sessions. While problem is present debug vpdn l2x-event shows:

«312238: May 13 14:32:43.042: VPDN Tnl/Sn 0 0 CLIENT: fail to set server 000BA226 -> 

session 000BA226

312239: May 13 14:32:43.042: VPDN Unknown vpdn syslog error due to AAA disconnect code 

0″

Conditions: Occurs after a few days of LNS uptime.

Workaround: There is no workaround. 

•

CSCsz92924

Symptoms: CPU HOG in Crypto ACL is seen on the GM. The GM may crash some milliseconds 
later after printing the hog.

Conditions: This symptom is observed on a large ACL on the KS (greater than 70 lines) with or 
without large ACL locally on the GM.

Workaround: Limit the ACL length drastically. 

•

CSCsz93207

Symptoms: In an EZVPN scenario, the traffic to the internet is not getting NATed.

Conditions: The symptom is observed in an EZVPN scenario with “identical addressing” and “split 
tunnel” configured.

Workaround: Use Cisco IOS Release 12.4(15)T3. 

•

CSCsz96323

Symptoms: A Cisco 7301 router crashes with “protocol pptp” configured.

Conditions: The symptom is observed with a Cisco 7301 router when “protocol pptp” is configured.

Workaround: There is no workaround. 

•

CSCsz97833

Symptoms: HTTP-based certificate revocation list (CRL) checking fails.

Conditions: Occurs due to an extra character appended to the URL.

Workaround: Disable CRL checking. 

•

CSCsz99228

Symptoms: When the clear crypto gdoi command is issued on the GM in a setup where one GM 
and two KSs are used, a crash is seen on the GM. This does not happen before the clear crypto gdoi 
is used. Also, this crash was not seen in a setup involving just one GM and one KS.

Conditions: This crash is only seen on Cisco IOS Release 12.4(20)T.

Workaround: There is no workaround. 

Решено: Проблемы с подключением пользователей по PPPoVPDN. Лимиты? (Cisco 2811, IOS 12.4(15)T4.)

Модератор: Модераторы разделов

...
aaa new-model
aaa session-mib disconnect
!
!
aaa authentication login default local
aaa authentication ppp default group radius
aaa authorization config-commands
aaa authorization exec default local
aaa authorization network default group radius group radius
aaa authorization configuration default group radius
aaa accounting update periodic 1
aaa accounting network default start-stop group radius
...
vpdn enable
vpdn aaa attribute nas-ip-address vpdn-nas
vpdn logging
vpdn logging user
!
vpdn-group 1
! Default PPTP VPDN group
 accept-dialin
  protocol pptp
  virtual-template 1
 session-limit 32767
 l2tp tunnel receive-window 1024
 ip pmtu
 ip mtu adjust
!
...
interface FastEthernet0/1
 no ip address
 duplex auto
 speed auto
 fair-queue
!
interface FastEthernet0/1.103
 description UKRCOM Kindiyskoe shosse
 encapsulation dot1Q 103
 ip address 10.75.16.1 255.255.255.0 secondary
 ip address 10.75.15.1 255.255.255.0
 no ip redirects
 no ip unreachables
 ip nat outside
 ip virtual-reassembly
!
interface FastEthernet0/1.106
 description UKRCOM XBK
 encapsulation dot1Q 106
 ip address 10.75.10.1 255.255.255.0 secondary
 ip address 10.75.9.1 255.255.255.0
 no ip redirects
 no ip unreachables
 ip nat outside
 ip virtual-reassembly
!
...
interface Virtual-Template1
 ip unnumbered Loopback0
 ip access-group ExtFW in
 ip access-group ExtFW out
 no ip redirects
 ip mtu 1450
 ip flow ingress
 ip flow egress
 ip route-cache policy
 ip route-cache flow
 ip tcp adjust-mss 1400
 ip policy route-map clear-df
 autodetect encapsulation ppp
 no snmp trap link-status
 no peer default ip address
 ppp mtu adaptive
 ppp authentication ms-chap ms-chap-v2 callin
 ppp ipcp dns 194.79.20.12 aaa
 ppp ipcp wins reject
 ppp ipcp address unique
...