>Долго мучаюсь над такой проблемой. Tacacs+ не выдает диалапному клиенту адрес, хотя
>тот и прописан в конфиге.
>
>настройки такие:
>---- 3640 ------
>version 12.2
>!
>aaa authentication login default group tacacs+ local-case
>aaa authentication login noauth none
>aaa authentication login local local-case
>aaa authentication ppp default if-needed group tacacs+ local
>aaa authorization exec default group tacacs+ if-authenticated
>aaa authorization network default group tacacs+
>!
>interface Group-Async1
> ip unnumbered FastEthernet0/0.1
> ip nat inside
> encapsulation ppp
> async mode interactive
> peer default ip address pool dialup
> group-range 33 48
>!
>ip local pool dialup 192.168.1.10 192.168.1.40
>!
>line 33 48
> session-timeout 30  output
> location Dial-up
> no exec-banner
> exec-timeout 6 0
> no activation-character
> modem InOut
> rotary 1
> terminal-type network
> exec-character-bits 8
> special-character-bits 8
> transport preferred none
> transport input telnet
> transport output telnet
> autoselect during-login
> autoselect ppp
> telnet transparent
> stopbits 1
> speed 38400
> flowcontrol hardware
>----------------
>
>--- Tacacs+ ---- tac_plus version F4.0.4.alpha
>key = "*******"
>
>accounting file = "/var/log/tac_plus.acc"
>
>default authorization = permit
>
>user = **** {
>    login = des ***********
>
>    service = exec {
>        noescape = true
>        autocmd = "ppp"
>    }
>
>    service = ppp protocol = ip {
>        default attribute = permit
>
>        addr = 192.168.1.44
>    }
>}
>
>----------------
>
>Что я делаю не так? подскажите плз.

Если пул у Вас прописан на циске, то почему IP-адрес должен выдавать Tacacs?