Thursday, August 22, 2019

Multiple Cisco PPTP Connections with different Auth

Hi Guys,

I've been stuck on this one for a while now, I've done this with other routers such as Mikrotik, however I cannot seem to work this out on Cisco.

I have the router acting as the PPTP VPN Server, I want Customer1 to login in and receive the 10.20.20.1 IP address and Customer2 to login and receive the 10.30.30.1 IP address.

I have successfully been able to have both routers connect to the PPTP server with the local auth, the only issue is they both connect to VPDN-Group Customer1, and both receive the 10.20.20.1 IP address.

Is there a way in Cisco that you can assign local auth to specific VPDN Groups?
Please see config below:

vpdn-group Customer1

! Default PPTP VPDN group

accept-dialin

protocol pptp

virtual-template 1

session-limit 1

local name Customer1

no source vpdn-template

l2tp tunnel timeout no-session 15

vpdn-group Customer2

accept-dialin

protocol pptp

virtual-template 2

local name Customer2

no source vpdn-template

l2tp tunnel timeout no-session 15

!

interface Virtual-Template1

description Customer1

ip unnumbered Loopback0

peer default ip address pool Customer1

no keepalive

ppp encrypt mppe 128

ppp authentication ms-chap ms-chap-v2

!

interface Virtual-Template2

description Customer2

ip unnumbered Loopback0

peer default ip address pool Customer2

no keepalive

ppp encrypt mppe 128

ppp authentication ms-chap ms-chap-v2

ip local pool Customer1 10.20.20.1

ip local pool Customer2 10.30.30.1

username cust1 password 0 cust1

username cust2 password 0 cust2



No comments:

Post a Comment