В твоем ничего особенного не обнаружил. Вот какой у меня конфиг. (правда 3640...) рабочий, немного лишнего из него выкинул. с Radiusа VSA не передаю вообще.
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname obcen
!
boot-start-marker
boot-end-marker
!
logging console informational
logging monitor informational
enable secret 5 xxxxxxxxxx
!
username root secret 5 xxxxxxxxxx
clock timezone MSK 3
aaa new-model
!
!
aaa authentication login default local
aaa authentication ppp default group radius
aaa authorization exec default local
aaa accounting update newinfo
aaa accounting network default start-stop group radius
aaa session-id common
ip subnet-zero
no ip source-route
ip rcmd rsh-enable
ip rcmd remote-host root zzzzzzzzzzz root enable
ip flow-cache timeout inactive 60
ip flow-cache timeout active 10
!
!
ip cef
no ip domain lookup
ip domain name zzzzzzzzzzzzzzz
ip name-server zzzzzzzzzzzzzzz
ip name-server zzzzzzzzzzzzzzz
no ip dhcp conflict logging
!
!
ip accounting-threshold 65536
vpdn enable
!
vpdn-group 1
! Default PPTP VPDN group
accept-dialin
  protocol pptp
  virtual-template 1
!
vpdn-group 2
accept-dialin
  protocol pppoe
  virtual-template 1
!
vty-async
vty-async ppp authentication pap ppp
!
no voice hpi capture buffer
no voice hpi capture destination
!
policy-map extdns
!
location Kursk,Russia
!
interface Loopback0
no ip address
!
interface FastEthernet0/0
ip address 192.168.16.0 255.255.255.0
speed auto
full-duplex
no cdp enable
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
no cdp enable
!
interface Virtual-Template1
no ip address
ip route-cache flow
peer default ip address pool PPPoE
ppp authentication chap
!
router bgp 41xxx
no synchronization
bgp router-id xxxxx
bgp log-neighbor-changes
network 192.168.16.0
network xxxxx.254.64
redistribute static
neighbor xxxxx remote-as 41599
neighbor xxxxx prefix-list myonly out
no auto-summary
!
ip local pool PPPoE xxxxx.254.64 xxxxx.254.95
no ip http server
ip classless
!
ip prefix-list myonly seq 5 permit xxxxx.254.64/27
!
no cdp run
!
snmp-server community Cisa RW
snmp-server enable traps tty
radius-server attribute 44 include-in-access-req
radius-server attribute 44 extend-with-addr
radius-server attribute 8 include-in-access-req
radius-server host xxxxx.254.8 auth-port 1812 acct-port 1813
radius-server host xxxxx.252.36 auth-port 1812 acct-port 1813
radius-server retransmit 5
radius-server key xxxxxxxxxxxxxxx
radius-server vsa send accounting
radius-server vsa send authentication
!
!
dial-peer cor custom
!
!
!
banner login 
Preved

!
line con 0
line aux 0
session-timeout 1440
flowcontrol hardware
line vty 5 63
line vty 64 128
session-timeout 1440
!
ntp clock-period 17179977
ntp server 213.59.233.2
!
!
end