Долго мучаюсь над такой проблемой. Tacacs+ не выдает диалапному клиенту адрес, хотя тот и прописан в конфиге.

настройки такие:
---- 3640 ------
version 12.2
!
aaa authentication login default group tacacs+ local-case
aaa authentication login noauth none
aaa authentication login local local-case
aaa authentication ppp default if-needed group tacacs+ local
aaa authorization exec default group tacacs+ if-authenticated
aaa authorization network default group tacacs+
!
interface Group-Async1
ip unnumbered FastEthernet0/0.1
ip nat inside
encapsulation ppp
async mode interactive
peer default ip address pool dialup
group-range 33 48
!
ip local pool dialup 192.168.1.10 192.168.1.40
!
line 33 48
session-timeout 30  output
location Dial-up
no exec-banner
exec-timeout 6 0
no activation-character
modem InOut
rotary 1
terminal-type network
exec-character-bits 8
special-character-bits 8
transport preferred none
transport input telnet
transport output telnet
autoselect during-login
autoselect ppp
telnet transparent
stopbits 1
speed 38400
flowcontrol hardware
----------------

--- Tacacs+ ---- tac_plus version F4.0.4.alpha
key = "*******"

accounting file = "/var/log/tac_plus.acc"

default authorization = permit

user = **** {
    login = des ***********

    service = exec {
        noescape = true
        autocmd = "ppp"
    }

    service = ppp protocol = ip {
        default attribute = permit
        addr = 192.168.1.44
    }
}

----------------

Что я делаю не так? подскажите плз.