Re: ppp and aaa [7:38665]
Thanks for the info. I used a vitual-template for the t-1's and a group-async for the modems and enabled multli-link for them. I'm not sure if that will work for ISDN, I'm using analog only. Michael Williams wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Yes. Setup your AAA like so: aaa new-model aaa authentication login default group radius enable aaa authentication ppp use-radius group radius When configuring the interface, say Dialer1, you configure the encapsulation, then configure the authentication like so: interface Dialer1 description Interface for dial-in users encapsulation ppp ppp authentication [chap | pap] use-radius This will tell the incoming ppp dial-up to authenticate using radius. By simply not including the ppp authentication command on the T1s interface configuration, that should make it where the T1s don't require any authentication, thus the AAA authentication we defined in AAA doesn't affect those interfaces. I don't know if you're using a Virtual-Template to form your multilink or if you're configuring your multilink bundle (T1s) manually. A problem I haven't been able to solve is this: I'm using Virtual-Template to multilink my two T1s, but I'd also like to configure a different Virtual-Template (if that's even possible) for the Dialer interface to use so that people dialing in with ISDN (BRI) can bond their B channels together for 128K pipe. But I haven't found a way to use virtual-templates in a way that lets you define more than one use for it. I've got a config of a 3640 I setup with two T1s using PPP Multilink on the same router that's also configured with 18 MICA digital modems with T1-PRI w/built-in CDU (only 18 lines active tho) to accept either analog or ISDN BRI digital calls. If you would like, I can e-mail a copy. HTH, Mike W. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=38791t=38665 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
ppp and aaa [7:38665]
I have a 2620 that has two T-1's that are encaps'ed with ppp and are multilinked. I also have a 16 port async modem NM in the router. I want to setup radius authentication on the router for dial-in clients. What will happen with my T-1's when I enable AAA? Is there a way to specify only the dial-in clients to use radius? TIA. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=38665t=38665 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: ppp and aaa [7:38665]
Yes. Setup your AAA like so: aaa new-model aaa authentication login default group radius enable aaa authentication ppp use-radius group radius When configuring the interface, say Dialer1, you configure the encapsulation, then configure the authentication like so: interface Dialer1 description Interface for dial-in users encapsulation ppp ppp authentication [chap | pap] use-radius This will tell the incoming ppp dial-up to authenticate using radius. By simply not including the ppp authentication command on the T1s interface configuration, that should make it where the T1s don't require any authentication, thus the AAA authentication we defined in AAA doesn't affect those interfaces. I don't know if you're using a Virtual-Template to form your multilink or if you're configuring your multilink bundle (T1s) manually. A problem I haven't been able to solve is this: I'm using Virtual-Template to multilink my two T1s, but I'd also like to configure a different Virtual-Template (if that's even possible) for the Dialer interface to use so that people dialing in with ISDN (BRI) can bond their B channels together for 128K pipe. But I haven't found a way to use virtual-templates in a way that lets you define more than one use for it. I've got a config of a 3640 I setup with two T1s using PPP Multilink on the same router that's also configured with 18 MICA digital modems with T1-PRI w/built-in CDU (only 18 lines active tho) to accept either analog or ISDN BRI digital calls. If you would like, I can e-mail a copy. HTH, Mike W. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=38735t=38665 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]