12.3 for Cisco-NASes ( vas: Re: [cisco-nas] as5350 question )

[Andrey Zimin]

Hi Aaron,

my comments inline.

> > yestarday I do testing 12.3(4.4a)M for targeting as DialUP NAS (as5400)
> > and found problem with PPP PAP authentifications/authorizations -
> > NAS do not ask radius server for permit connections.
> > Just accept any user with any password...
> > :(( or :))) depend of your side.
> 
> Yes, that's a good one, isn't it - assuming that you have
> "if-needed" configured, then this is:
> 
> CSCec54311
> Internally found catastrophic defect: Resolved (R)
> PPP authen bypassed by if-needed if autoselect during-login config
thanks, am alredy know. And same: CSCec36752 dupplicate?

sorry, we support two types of customer authentifications - terminal and PPP PAP.
also we have clear tcp, ms-callback, etc...
so, we must have autoselect and if-needed... 
described in ddts workarround not for us.... :(((

> which is fixed in 12.3(3a) and 12.3(5.4) (and will be when 
> 12.3(next)M appears on CCO.)
5.4 is differend train target in the future, next year?
not sure that have fixes of other DDTs and have new issues.

12.3(3a) fill of already known bugs, hit us.
our choice have fix under 4.4a - targeting for next CCO 12.3M.
hope it not have other critical issues for us and have integrated fix of this ddts
in short time...

also jfyi: i see 4.4a generate this message, when disconnect customer:
> Oct 27 18:53:55 APAS17.mtu.ru 187: Oct 27 18:54:43.434: %CSM-1-CSM_UNKNOWN_FAIL_CODE: Unknown fail code 37
> Oct 27 18:54:14 APAS17.mtu.ru 188: .Oct 27 18:55:04.056: %CSM-1-CSM_UNKNOWN_FAIL_CODE: Unknown fail code 37
> Oct 27 18:54:38 APAS17.mtu.ru 189: Oct 27 18:55:27.320: %CSM-1-CSM_UNKNOWN_FAIL_CODE: Unknown fail code 37
> Oct 27 18:54:57 APAS17.mtu.ru 190: Oct 27 18:55:47.047: %CSM-1-CSM_UNKNOWN_FAIL_CODE: Unknown fail code 37
enviroment is isdn pri net-5, np.8.8.1.spe
hope it's cosmetic, and hope in r2dtmf we do not hit any critical.

much thanks for your support and with best regards.

Good luck !
======================
 Andrey Zimin | AVZ7-RIPE
           MTU-Intel ISP
        Moscow, Russia
======================