RE: [nsp] Argh

From: Robert J. Adams (radams@siscom.net)
Date: Tue Sep 07 1999 - 11:28:24 EDT


Basil,

That was one of the first things I tried.. needless to say, it didn't work.
Seems like it would though.

-j

-----Original Message-----
From: Basil V. Dolmatov [mailto:dol@east.ru]
Sent: Tuesday, September 07, 1999 6:28 AM
To: Robert J. Adams
Cc: cisco-nsp@puck.nether.net
Subject: Re: [nsp] Argh

On Mon, 6 Sep 1999, Robert J. Adams wrote:

> Hello all,
>
> Well, since I was playing with dialup, I turned on AAA new-model .. one
> problem.. now whenever a T1 (i.e. int serial 1/0) goes down/up it tries to
> ppp auth them. Anyway to tell it NOT to auth on an interface? I tried the
> obvious (no ppp auth, no ppp auth pap) with no luck.
it is present in 12.0, I suppose that it is appeared in some 11.3 version,

you can say: ppp authentication chap pap QQ

setting beforehand list QQ to

aaa authentication ppp QQ none

This effectively disables ppp authentication on given interface...

Voila!

--------------------------------------
Basil (Vasily) Dolmatov CCNP-Security, CCDA
East Connection ISP, Moscow, Russia. (http://www.east.ru)



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:05 EDT