Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ppp cannot run on this line?

i just started to setup authorization and now i can't get into my router by telnet.

all i did was this.

aaa athorization exec default group radius

and then applied

aaa athorization exec default to line vty 0 4

are you suppose to apply authorization to lines? but why is it saying ppp won't work? my debug says this

exe-router#rvice-Type [6] 6 Login [1]

3d00h: RADIUS: NAS-IP-Address [4] 6 172.16.1.1

3d00h: RADIUS: Received from id 21645/103 172.16.1.26:1645, Access-Accept, len 1

19

3d00h: RADIUS: authenticator 94 8B C1 DF 00 23 90 6E - 2F 31 6B AF C1 FC 6E FD

3d00h: RADIUS: Vendor, Cisco [26] 25

3d00h: RADIUS: Cisco AVpair [1] 19 "Shell:priv-lvl=15"

3d00h: RADIUS: Framed-Protocol [7] 6 PPP [1]

3d00h: RADIUS: Port-Limit [62] 6 1

3d00h: RADIUS: Service-Type [6] 6 Login [1]

3d00h: RADIUS: Class [25] 32

3d00h: RADIUS: 40 B1 04 CA 00 00 01 37 00 01 AC 10 01 1A 01 C3 [@??????7?????

???]

3d00h: RADIUS: 32 D8 AD 10 92 58 00 00 00 00 00 00 00 44 [2????X???????

D]

3d00h: RADIUS: Vendor, Microsoft [26] 12

3d00h: RADIUS: MS-MPPE-Enc-Policy [7] 6

3d00h: RADIUS: 00 00 00 [???]

3d00h: RADIUS: Vendor, Microsoft [26] 12

3d00h: RADIUS: MS-MPPE-Enc-Type [8] 6

3d00h: RADIUS: 00 00 00 [???]

3d00h: RADIUS(00000057): Received from id 21645/103

3d00h: RADIUS: Constructed " ppp negotiate "

3d00h: AAA/AUTHOR/EXEC(00000057): processing AV priv-lvl=15

3d00h: AAA/AUTHOR/EXEC(00000057): processing AV noescape=1

3d00h: AAA/AUTHOR/EXEC(00000057): processing AV autocmd= ppp negotiate

3d00h: AAA/AUTHOR/EXEC(00000057): Authorization successful

says i was authorized. but....also where did that ppp autocommand come from?

1 REPLY
Silver

Re: ppp cannot run on this line?

In your config , I think you havent configured for authentication.

Authentication should be configured first and then the suthorization should be done.

183
Views
5
Helpful
1
Replies