RE: [nsp] Argh

From: Chris Fairbanks (chrisf@winterlink.net)
Date: Tue Sep 07 1999 - 02:29:32 EDT


I know it is in 12.0 as I had to use it recently for a client that had to
run 12.0 for other reasons. Otherwise I cannot remember off the top of my
head on other versions, but I seem to recall using it in 11.3 something
before also. You might have to ask tac on that one.

        -Chris

> -----Original Message-----
> From: Robert J. Adams [mailto:radams@siscom.net]
> Sent: Monday, September 06, 1999 11:04 PM
> To: Chris Fairbanks
> Cc: cisco-nsp@puck.nether.net
> Subject: RE: [nsp] Argh
>
>
> Chris,
>
> Hrm. What version of IOS you running? I have an rather old
> (but stable)
> 11.1(26)CC1
>
> isdn1.day-oh(config)#aaa authorization network no-auth none
> ^
> % Invalid input detected at '^' marker.

> isdn1.day-oh(config)#
>
> Hell, under s1/0 I don't even have a ppp auth..
>
> isdn1.day-oh#conf t
> Enter configuration commands, one per line. End with CNTL/Z.
> isdn.day-oh(config)#int s1/0
> isdn1.day-oh(config-if)#ppp a?
> authentication
>
> bc1.day-oh(config-if)#ppp a
>
> Maybe it's time to upgrade to something newer. Hrm.
>
> -j
>
>
> -----Original Message-----
> From: Chris Fairbanks [mailto:chrisf@winterlink.net]
> Sent: Tuesday, September 07, 1999 2:09 AM
> To: 'Robert J. Adams'; Alan Sawyer
> Cc: cisco-nsp@puck.nether.net
> Subject: RE: [nsp] Argh
>
>
> Robert,
>
> Here is another way to do the same thing that might not
> break your
> network dial-up customers. Try creating a new authorization
> profile and
> apply it to your serial interfaces you do not want authorization on.
> Remember to remove the "aaa authorization network none" first.
>
> Example.
>
> aaa new-model
> aaa authentication ppp default tacacs+
> aaa authorization network no-auth none (this is the new profile)
> !
> interface Serial1/0
> description T1 to Internet
> ip address 1.1.1.2 255.255.255.0
> no ip directed-broadcast
> encapsulation ppp
> ppp authorization no-auth (add profile to int)
>
>
>
> -Chris
>
>



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:05 EDT