خطای 691 کاربران روی 2511
با سلام به همه اساتید و بزرگان
من کانفیگ زیر رو واسه 2511 گذاشتم مشکل اینه که کاربر نمیتونه وصل بشه خطای691 میگیرن
و سرور کش هم اینترنت نداره و کلا کار نمیکنه .
نرم افزار اکانینگ nttac و کش هم اکسپرس هست .
خواستم اگه لطف کنید و بگید اشکال کار کجاست؟؟؟؟؟ من ipهای لازم رو تو پرانتز نوشتم.
کاربرا ip ولید میگیرن.
با تشکر بینهایت از شما دوستان
قربان شما
aaa new-model
aaa authentication ppp default none
aaa authentication ppp isputil group radius local
aaa authorization network default none
aaa authorization network isputil group radius local
aaa accounting update newinfo
aaa accounting network default none
aaa accounting network isputil start-stop group radius
enable password ****
!
username **** password 0 ***
!
!
!
!
ip subnet-zero
ip name-server 217.218.155.104
ip name-server 217.218.155.105
ip name-server 4.2.2.4
ip name-server 192.9.9.3
!
ip address-pool local
modemcap entry sam:AA=S0=1
cns event-service server
!
!
!
!
!
interface Ethernet0
ip address 192.168.50.1 255.255.255.0 secondary
ip address (ip-router) 255.255.255.240
ip access-group 135 in
ip access-group 135 out
no ip directed-broadcast
ip nat inside
no ip mroute-cache
ip policy route-map cache
no keepalive
no cdp enable
!
interface Serial0
ip unnumbered Ethernet0
no ip directed-broadcast
ip nat outside
encapsulation ppp
no ip mroute-cache
no cdp enable
!
interface Serial1
no ip address
no ip directed-broadcast
shutdown
no cdp enable
!
interface Group-Async1
ip unnumbered Ethernet0
no ip directed-broadcast
ip nat inside
encapsulation ppp
ip tcp header-compression
no ip mroute-cache
ip policy route-map cache
async mode interactive
peer default ip address pool dial-in
no cdp enable
ppp authentication pap chap isputil
ppp authorization isputil
ppp accounting isputil
group-range 1 16
!
ip local pool dial-in (range-ip)
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0
no ip http server
ip http port 27936
!
access-list 1 permit (ip-router) 255.255.255.240
access-list 10 permit (ip-accounting)
access-list 110 deny ip host (ip-cache) any
access-list 110 permit tcp any any eq www
access-list 111 deny ip host (ip-cache) any
access-list 111 deny ip any host (ip-accounting)
access-list 111 permit tcp any any eq www
access-list 135 deny tcp any any range 135 139
access-list 135 deny tcp any any eq 4444
access-list 135 deny tcp any any eq 1434
access-list 135 deny udp any any eq 1434
access-list 135 deny tcp any any eq 593
access-list 135 deny udp any any range 135 netbios-ss
access-list 135 deny tcp any any eq 445
access-list 135 deny udp any any eq netbios-ns
access-list 135 deny udp any any eq netbios-dgm
access-list 135 deny udp any any range 995 999
access-list 135 deny udp any any eq ntp
access-list 135 deny tcp any any eq finger
access-list 135 permit ip any any
no cdp run
route-map cache permit 10
match ip address 111
set ip next-hop (ip-cache)
!
snmp-server engineID local 00000009020000000C5CD8CE
snmp-server community public RW 10
radius-server host (ip-accounting) auth-port 1645 acct-port 1646
radius-server key (key nttac)
!
line con 0
transport input none
line 1 16
session-timeout 10
no flush-at-activation
autoselect during-login
autoselect ppp
modem answer-timeout 10
modem InOut
modem autoconfigure discovery
transport input all
autohangup
stopbits 1
speed 115200
flowcontrol hardware
line aux 0
line vty 0 4
!
end
