конфиг такой:
aaa new-model
!
!
aaa group server radius dialup
server 10.0.0.1 auth-port 1812 acct-port 1813
server-private 10.0.0.1 auth-port 1812 acct-port 1813 timeout 10 key dialup
aaa group server radius vpn
server 10.0.0.2 auth-port 1812 acct-port 1813
server-private 10.0.0.2 auth-port 1812 acct-port 1813 timeout 10 key vpn
aaa authentication ppp default group dialup
aaa authorization exec default local
aaa authorization network default group dialup
aaa accounting update newinfo
aaa accounting network default start-stop group dialup
aaa session-id common
vpdn enable
vpdn-group 1
accept-dialin
protocol pptp
virtual-template 1
interface Virtual-Template1
ip unnumbered Loopback1
autodetect encapsulation ppp
peer default ip address pool vpn
no keepalive
ppp authentication pap vpn
interface Group-Async1
ip unnumbered Loopback0
ip access-group 102 in
encapsulation ppp
no ip mroute-cache
async mode interactive
peer default ip address pool dialin-pool
ppp callback accept
ppp authentication pap chap dialup
group-range 1 240
!
interface Dialer1
no ip address
encapsulation ppp
no ip mroute-cache
dialer in-band
dialer idle-timeout 1800
peer default ip address pool dialin-pool
no fair-queue
no cdp enable
ppp authentication chap pap
ppp authorization chap