Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Callback via CSACS Tacacs

I have an AS5350 in use for ISDN and Async connections. The problem is that I am trying to configure callback on the AS, but to add to the problem I am using CSACS for AAA and also for providing the dial string to use for callback. The initial authentication is OK but when the line is disconnected the AS does not always callback the remote end. In order for it to work I will have to restart the services on CSACS. I have noticed from DEBUG TACACS AUTHEN,AUTHOR AND ACCOUNT, that authentication and authorization passes and the callback dialstring is processed but no accounting requests occur.

COPY OF CONFIG FOR INFO

interface Dialer1

description Test ISDN

ip address xxx.xxx.xxx.xxx /24

no ip redirects

encapsulation ppp

no ip route-cache

no ip mroute-cache

dialer pool 1

dialer remote-name ROUTER

dialer idle-timeout 300

dialer enable-timeout 30

dialer called 1234

dialer caller 1234567 callback

dialer hold-queue 20

dialer callback-secure

dialer-group 1

no peer default ip address

no cdp enable

ppp callback accept

ppp authentication chap TEST-ISDN

ppp authorization TEST-ISDN

ppp accounting TEST-ISDN

end

1 REPLY
Silver

Re: Callback via CSACS Tacacs

As going through the configuration it seems enabling ppp authenication for callin and callout separately can be solve your problem.for referance you can go through below link

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a0080093dc9.shtml

http://www.cisco.com/en/US/products/sw/secursw/ps2086/prod_release_note09186a00800e6edc

76
Views
0
Helpful
1
Replies