[cisco-nas] Static IP address

Clara Hatem hatemc at telecomds.net
Wed Sep 22 09:27:41 EDT 2004


Hello,

Here goes the problem:

1- first configuration
aaa authorization exec dial-up if-authenticated 
aaa authorization network dial-up if-authenticated

with that, all active users are allowed in, however whenever a user has a
static IP, it is not assigned. Instead, an IP is assigned from the pool
configured on the AS5300

2- second configuration

aaa authorization exec dial-up group radius 
aaa authorization network dial-up group radius

with this configuration, the static IP is assigned Ok, however any user that
has no static IP is not allowed in. The error in the PPP debug on the NAS is
the following:

*Sep 22 11:07:40: As35 AAA/AUTHOR/IPCP: Start.  Her address 0.0.0.0, we want
0.0.0.0
*Sep 22 11:07:40: As35 LCP: O PROTREJ [Open] id 3 len 46 protocol IPCP

IPCP is being rejected.

Thanks for any help.
Clara


-----Original Message-----
From: Oliver Boehmer (oboehmer) [mailto:oboehmer at cisco.com] 
Sent: Monday, September 20, 2004 4:38 PM
To: hatemc at telecomds.net; cisco-nas at puck.nether.net
Subject: RE: [cisco-nas] Static IP address

 
Did you configure "aaa authorization network group radius" or similar? 

	oli

________________________________

From: cisco-nas-bounces at puck.nether.net
[mailto:cisco-nas-bounces at puck.nether.net] On Behalf Of Clara Hatem
Sent: Monday, September 20, 2004 5:33 PM
To: cisco-nas at puck.nether.net
Subject: [cisco-nas] Static IP address

Hello,

What is the command to allow an incoming call to be assigned a static IP
address on a Cisco 5300 NAS?

I have tested with both RadiusNT and Radiator radius servers. The user
account, although configured with a static IP address, is still being
assigned an IP from the pool. Below is a sample async interface
configuration.

interface Group-Async1
 ip unnumbered FastEthernet0
 encapsulation ppp
 no logging event link-status
 load-interval 30
 async dynamic address
 async mode interactive
 peer default ip address pool digital8
 ppp max-bad-auth 3
 ppp authentication pap chap dial-up
 ppp authorization dial-up
 ppp accounting dial-up
 group-range 1 30
 

Thank you

Clara






More information about the cisco-nas mailing list