Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

AAA/AUTHOR/LCP: Denied & hssi interface


I have a 3640 with an ATM card for our DSL customers. I have installed a HSSI interface to connect to a DS3.

The HSSI interface is not connecting. I get "hssi2/0 is up, line protocol is down". I set up a "debug cond hssi2/0" and a "debug ppp nego" and I got the following error:

Hs2/0 AAA/AUTHOR/LCP: Denied

I do have the router set up to authenticate my DSL customers through a radius server. Other debugs shows me that the router is communicating with the radius to "authenticate" the Hssi2/0 line.

Here is the "AAA" portion of my configuration:

aaa new-model

aaa authentication login default local

aaa authentication login console local

aaa authentication ppp default if-needed group radius local

aaa authorization network default group radius

aaa accounting update newinfo

aaa accounting exec default start-stop group radius

aaa accounting network default start-stop group radius

What do I need to do get the hssi interface to connect WITHOUT trying to authenticate through the radius server and still allow my DSL customers to authenticate?

bob bloise

system administrator

trellis technologies, Inc.

(704) 849-7789

Cisco Employee

Re: AAA/AUTHOR/LCP: Denied & hssi interface

You can try to configure a method list for the ppp authentication and network authorization and only apply it to the lines that are needed.

Default method list is applied to all interfaces.

Hope this helps,


New Member

Re: AAA/AUTHOR/LCP: Denied & hssi interface

I have looked for some configuration examples and can't any. Can anyone point me to a page with some conf examples?

Thanks in advance.........

bob bloise

New Member

Re: AAA/AUTHOR/LCP: Denied & hssi interface

Turn off authorization on the HSSI interface:

aaa authorization network NO_AUTHOR none

int hs2/0

ppp authorization NO_AUTHOR