Cisco Cisco IOS Software Release 12.2(2)DD

Follow the steps below to verify the successful configuration of VPDN group session limiting:

Enter the session-limit 1 command in VPDN configuration mode. 

Establish a VPDN session by dialing in to the network access server (NAS) using an allowed username 
and password.

Attempt to establish another VPDN session by dialing in to the NAS using another allowed username 
and password.

A Syslog message similar to the following should appear on the console of the router:

00:11:17: %VPDN-6-MAZ_sESS_EXCD:L2F HGW great_went has exceeded configured local 

session-limit and rejected user user@anywhere.com

Enter the show vpdn history failure command on the router. If you see output similar to the following, 
the group session limit was successful:

User: user@anywhere.com

NAS: cliford_ball, IP address = 172.25.52.8, CLID = 2

Gateway: great_went, IP address = 172.25.52.7, CLID = 13

Log time: 00:04:21, Error repeat count:1

Failure type: Exceeded configured VPDN mazimum session limit

Failure reason:

Router(config-vpdn-acc-in)# virtual-template 

Specifies the number of the virtual template that will 
be used to clone the virtual access interface.

template-number—Number of the virtual 
template that will be used to clone virtual-access 
interfaces. Valid range is 1 to 200.

Router(config-vpdn-acc-in)# exit

Exits VPDN accept-dialin interface mode.

Router(config-vpdn)# terminate-from hostname 

Accepts tunnels that have this host name configured 
as a local name.

host-name—The host name that this VPDN 
group will accept connections from.

Router(config-vpdn)# session-limit session-number

Limits the number of sessions allowed on the 
specified VPDN group. 

session-number—The maximum number of 
sessions allowed on the specified VPDN group 
in the range of 0 to 32767. If session-limit is 
configured to 0, no sessions are allowed on the 
VPDN group.