isdn and aaa/ppp authentication

Unanswered Question
Mar 30th, 2008
User Badges:

I am having difficulties understanding the following config as I don't have the ISDN equipment to test on :( I apprecate it if someone can explain it to me.


What interested me is the ppp and aaa authentication, are they correct? I created 2 groups (one tacacs+ server group name SANJOSE and a radius server group name ISDN. Can two groups have the same IP address?


All I want is allowing the users in group SANJOSE to access vty, aux, console and ISDN routers can authenticate only when the primary link failed.


Regards,

b


enable password cisco

!

aaa new-model

!

aaa group server tacacs+ SANJOSE

server 10.1.1.1

!

aaa group server radius+ ISDN

server 10.1.1.1

!

aaa authentication login default group SANJOSE tacacs+ enable

aaa authentication ppp ISDN-remote group ISDN

aaa authorization login default SANJOSE group tacacs+ enable

aaa authorization network ISDN-remote group radius

!

interface Dialer1

Description link to Cali

bandwidth 64

ip address 192.168.1.1 255.255.255.0

encapsulation ppp

dialer pool 1

dialer remotename site1

dialer-group 1

ppp authentication chap ISDN-remote

!

tacacs-server host 10.1.1.1 key cisco


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.

Actions

This Discussion