Because of demands of balance service, cutover part of users from ISN8850 to MA5200G. After cutover users at MA5200G can dial and pass the authentication, but cannot access network.
Delete corresponding Virtual-Template at ISN8850, user at MA5200G can access network normally.
Check the configuration at ISN8850 and MA5200G and find that address pool at MA5200Gis from ISN8850, but ISN8850 adjusts address pool to MA5200G and not delete corresponding Virtual-Template. After cutover, when ISN8850 uses OSPF and introduce direct route and static route, it does not release route of Virtual-template address segment. User’s route returns and passes ISN8850, but not pass MA5200G, so user cannot access network.
When ISN8850 adjusts address pool, delete corresponding Virtual-Template. Otherwise it will influence other users at the same segment.