<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1400" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Dear All,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I am using cisco 2611 with IOS image file
c2600-i-mz.122-16.bin, and the radius server is icradius-0.18.1. The following
is my radius aaa configuration part:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV><FONT face=Arial color=#0000ff size=2>aaa new-model<BR>aaa authentication
login default local<BR>aaa authentication ppp default if-needed group radius
local<BR>aaa authorization network default group radius
if-authenticated<BR>aaa accounting network default start-stop group
radius</FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2>....</FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2>interface Group-Async1<BR> ip
unnumbered Loopback0<BR> ip nat inside<BR> encapsulation
ppp<BR> ip tcp header-compression<BR> no ip
mroute-cache<BR> async mode interactive<BR> peer default ip address
pool dialin_pool<BR> ppp authentication chap pap
default<BR> group-range 33 40<BR>!</FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2>......</FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2>radius-server host x.x.x.x
auth-port 1812 acct-port 1813<BR>radius-server key 7
0EDFTRHKIHGGFF<BR>radius-server vsa send accounting<BR>radius-server vsa send
authentication</FONT></DIV></BLOCKQUOTE>
<DIV><FONT face=Arial size=2>The above configuration works fine with cisco 3640
using IOS image file c3640-jk8o3s-mz.122-16a.bin. But not lucky for the 2611
nas. These are the radius debug log while I have tried to callin:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV><FONT face=Arial color=#ff0000 size=2>01:04:57: AAA/AUTHEN/START
(1083241614): port='Async33' list='' action=LOGIN service=PPP<BR>01:04:57:
AAA/AUTHEN/START (1083241614): using "default" list<BR>01:04:57: AAA/AUTHEN
(1083241614): status = UNKNOWN<BR>01:04:57: AAA/AUTHEN/START (1083241614):
Method=radius (radius)<BR>01:04:57: RADIUS: ustruct sharecount=2<BR>01:04:57:
Radius: radius_port_info() success=1 radius_nas_port=1<BR>01:04:57: RADIUS:
added cisco VSA 2 len 7 "Async33"<BR>01:04:57: RADIUS: Initial Transmit
Async33 id 0 202.47.226.10:1812, Access-Request, len
91<BR>01:04:57: Attribute 4 6
CA2FE285<BR>01:04:57:
Attribute 5 6
00000021<BR>01:04:57:
Attribute 26 15
0000000902094173<BR>01:04:57:
Attribute 61 6
00000000<BR>01:04:57:
Attribute 1 7
61646D69<BR>01:04:57:
Attribute 3 19
016AF044<BR>01:04:57:
Attribute 6 6
00000002<BR>01:04:57:
Attribute 7 6 00000001<BR>01:04:57: RADIUS: Received from id 0
202.47.226.10:1812, Access-Accept, len
56<BR>01:04:57: Attribute 13 6
00000001<BR>01:04:57:
Attribute 7 6
00000001<BR>01:04:57:
Attribute 28 6
00004650<BR>01:04:57:
Attribute 62 6
00000001<BR>01:04:57:
Attribute 6 6
00000002<BR>01:04:57:
Attribute 27 6 00057E40<BR>01:04:57: RADIUS: Response (0) failed
decrypt<BR>01:04:57: RADIUS: Reply for 0 fails decrypt<BR>01:04:57: AAA/AUTHEN
(1083241614): status = ERROR<BR>01:04:57: AAA/AUTHEN/START (1083241614):
Method=LOCAL<BR>01:04:57: AAA/AUTHEN (1083241614): User not found, end of
method list<BR>01:04:57: AAA/AUTHEN (1083241614): status = FAIL<BR>01:04:57:
Async33 AAA/DISC: 17/"User Error"<BR>01:04:57: Async33 AAA/DISC/EXT:
1043/"CHAP Auth Failed"<BR>01:04:57: AAA/ACCT/PROG: Updating Connect Progress
for ds0 -1 to 101<BR>01:04:57: As33 AAA/DISC: 18/"Host Request"<BR>01:04:57:
As33 AAA/DISC/EXT: 1046/"Upper Layer Req Close"<BR>01:04:57: As33 AAA/DISC:
1/"User Request"<BR>01:04:57: As33 AAA/DISC/EXT: 1045/"Received
Terminate"<BR>01:04:57: AAA/MEMORY: free_user (0x811441D4) user='admin'
ruser='NULL' port='Async33' rem_addr='async' authen_type=CHAP service=PPP
priv=1<BR>01:04:57: As33 AAA/AUTHOR/FSM: (0): LCP succeeds
trivially<BR>01:04:57: As33 AAA/DISC: 2/"Lost Carrier"<BR>01:04:57: As33
AAA/DISC/EXT: 1011/"Lost Carrier"<BR>01:04:57: AAA/ACCT/PROG: Updating Connect
Progress for ds0 -1 to 65<BR>01:04:58: As33 AAA/DISC: 2/"Lost
Carrier"</FONT></DIV></BLOCKQUOTE>
<DIV><FONT face=Arial size=2>Could you please suggest what is wrong with the
settings.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Thanks and Regards,</FONT></DIV>
<DIV><FONT face=Arial size=2>Souphonh</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV></BODY></HTML>