[nsp] Static-IP on AS5300 via RADIUS
Martin Cooper
mjc at cooper.org.uk
Fri Feb 7 20:47:47 EST 2003
Does anyone know if there's something I need to configure on
the Cisco NAS to make it use Cisco-AVPair attributes from the
RADIUS server to assign dial-in users static IP addresses ?
(I've tried 'radius-server host 131.111.xx.xx non-standard'.)
- I'm using the reference implementation of Livingston RADIUS.
- I've defined the Cisco-AVpair attributes in the dictionary:
#
# Vendor-Specific attributes use the SMI Network Management Private
# Enterprise Code from the "Assigned Numbers" RFC
#
VENDOR Cisco 9
#
# Cisco Vendor-Specific Attributes
#
ATTRIBUTE Cisco-AVPair 1 string Cisco
ATTRIBUTE Account-Info 250 string Cisco
ATTRIBUTE Service-Info 251 string Cisco
ATTRIBUTE Command-Code 252 string Cisco
- I've got the following entry in the RADIUS users file:
static Crypt-Password = "<removed>",
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 131.111.xx.xx,
Framed-MTU = 1500,
Cisco-AVPair = "ip:addr=131.111.xx.xx"
- I've got the following AAA/interface/pool config on the NAS:
aaa new-model
!
aaa authentication login dialin group radius
aaa authentication ppp default local group radius
aaa authorization exec NOAUTHO none
!
ip address-pool local
!
interface Serial3/0:15
ip unnumbered Loopback0
encapsulation ppp
isdn switch-type primary-net5
isdn incoming-voice modem
peer default ip address pool magpie3 magpie2 magpie1
ppp authentication pap
ppp timeout idle 900
!
interface Group-Async0
ip unnumbered Loopback0
encapsulation ppp
ip tcp header-compression
autodetect encapsulation ppp
async mode interactive
peer default ip address pool magpie1 magpie2
ppp authentication pap
ppp chap refuse
ppp timeout idle 900
group-range 1/00 2/107
!
ip local pool magpie1 131.111.xx.65 131.111.xx.89
ip local pool magpie2 131.111.xx.100 131.111.xx.159
ip local pool magpie3 131.111.xx.160 131.111.xx.216
!
radius-server host 131.111.xx.xx auth-port 1647 acct-port 1646
radius-server retransmit 3
radius-server key 7 <removed>
radius-server authorization permit missing Service-Type
!
line 1/00 2/107
session-timeout 15
exec-timeout 2 0
authorization exec NOAUTHO
login authentication dialin
no modem callout
modem Dialin
modem autoconfigure type magpie-v92-v44
transport preferred none
autoselect ppp
dispatch-timeout 100
!
Cheers,
Martin
More information about the cisco-nsp
mailing list