Consolidation of RAS, analog, and ISDN dial backup in one 3660

[bweir]

Can anyone point me to a sample configuration that shows how to consolidate analog and ISDN user remote access along with analog and ISDN dial backup on the same 3660 with 2 PRIs and two modem banks? This will be using AAA and tacacs+.

[4brown]

Take a look here:

http://www.cisco.com/warp/public/471/#ddr

You will have to pull samples from a few docs.

Hope this helps.

[bweir]

Thanks for the reply. I have looked through all of these sample configs however, my problem is that I have remote users who are using tacacs+ and remote analog routers (for DBU) that are using local authentication. Since the aaa authentication local-override command is only available on the AS5XXX series of devices, analog DBU is trying to go to tacacs instead of local authentication. On the other hand, when I change the order of the "aaa auth. login default" methods, the analog RAS users fail due to no local username.... I need a way to "mix and match" between them.

[4brown]

If I understand you correctly, you are trying to share TAC+ and local authentication on this device. If this is the case, just create another list and assign it to the group-async or async interface. Using PAP for your sample:

aaa authentication ppp ASYNC local

aaa authorization network ASYNC local

int group-asy 1

encap ppp

ppp authentication pap ASYNC

ppp authorization pap ASYNC

You only need to use network authorization if you plan to assign local user Attribute Value Pairs.

Hope this helps.

Robert

[bweir]

Thanks Robert... I will give it a try! Have a great day!

Brian

[bweir]

Thanks Robert... I will give it a try! Have a great day!

Brian