12.3 for Cisco-NASes ( vas: Re: [cisco-nas] as5350 question )

Aaron Leonard Aaron at cisco.com
Tue Oct 28 12:22:06 EST 2003


Hi Andrey,

> Yes, be carefull and do total tests.

> it's possible not hit you, depend of your nas configurations and offered
> services. but FYI and pay attentions:

> yestarday I do testing 12.3(4.4a)M for targeting as DialUP NAS (as5400)
> and found problem with PPP PAP authentifications/authorizations -
> NAS do not ask radius server for permit connections.
> Just accept any user with any password...
> :(( or :))) depend of your side.

Yes, that's a good one, isn't it - assuming that you have
"if-needed" configured, then this is:

CSCec54311
Internally found catastrophic defect: Resolved (R)
PPP authen bypassed by if-needed if autoselect during-login config

which is fixed in 12.3(3a) and 12.3(5.4) (and will be when 
12.3(next)M appears on CCO.)

Aaron


More information about the cisco-nas mailing list