[cisco-nas] Re: 'interface-config" cisco av-pair

Anastassios Chatzithomaoglou achatz at forthnet.gr
Mon Jun 23 14:11:32 EDT 2003


Does this command ("virtual-profile aaa") allow only lcp:interface-config attributes to be 
passed per-user, or does it do something more?
I have a lot of other per-user commands that are applied without the need of this command.

Dennis Peng wrote:

> Note that starting from 12.3 and onward, the "virtual-profile aaa"
> command is deprecated and we will automatically apply any
> interface-config AVP received from the AAA server without an explicit
> configuration. If you ever upgrade to 12.3 and then downgrade back to
> an older release, the command will be removed from the configuration,
> so you'll need to add it back in. Just something to keep in the back
> of your mind.
> 
> Dennis
> 
> Anastassios Chatzithomaoglou [achatz at forthnet.gr] wrote:
> 
>>I just found the "virtual-profile aaa" command which solved my problem ;-)
>>
>>Anastassios Chatzithomaoglou wrote:
>>
>>
>>>Interface-config seems not to be applied. Any idea why?
>>>
>>>IOS (tm) 7200 Software (C7200-IS-M), Version 12.2(6i), RELEASE SOFTWARE 
>>>(fc1)
>>>----------------------------------------------------------------------------- 
>>>
>>>Jun 20 16:44:04.950: Vi821 AAA/AUTHOR/LCP (3737647052): 
>>>Method=FORTHNET-RADIUS-DSL (radius)
>>>Jun 20 16:44:04.950: Vi821 AAA/AUTHOR (3737647052): Post authorization 
>>>status = PASS_REPL
>>>Jun 20 16:44:04.954: Vi821 AAA/AUTHOR/LCP: Processing AV service=ppp
>>>Jun 20 16:44:04.954: Vi821 AAA/AUTHOR/LCP: Processing AV timeout=86400
>>>Jun 20 16:44:04.954: Vi821 AAA/AUTHOR/LCP: Processing AV 
>>>interface-config#2=rate-limit output 384000 32000 32000 conform-action 
>>>transmit exceed-action drop
>>>Jun 20 16:44:04.954: Vi821 AAA/AUTHOR/LCP: Processing AV 
>>>interface-config#1=rate-limit input 128000 32000 32000 conform-action 
>>>transmit exceed-action drop
>>>Jun 20 16:44:04.954: Vi821 AAA/AUTHOR/LCP: Per-user interface config 
>>>created:
>>>timeout absolute 1440 0
>>>
>>>Jun 20 16:44:04.958: Vi821 AAA/AUTHOR/FSM: (0): Can we start IPCP?
>>>
>>>
>>>
>>>
>>
>>-- 
>>***********************************
>>   Chatzithomaoglou Anastasios
>>Network Design & Operations Center
>>          FORTHnet S.A.
>>      <achatz at forthnet.gr>
>>***********************************
>>
>>_______________________________________________
>>cisco-nas mailing list
>>cisco-nas at puck.nether.net
>>http://puck.nether.net/mailman/listinfo/cisco-nas
> 
> 

-- 
***********************************
    Chatzithomaoglou Anastasios
Network Design & Operations Center
           FORTHnet S.A.
       <achatz at forthnet.gr>
***********************************



More information about the cisco-nas mailing list