[c-nsp] PPPoE/RADIUS with 7206/NPE-200 and IOS 12.3(9c)

[Oliver Boehmer (oboehmer)]

Stephen,

your original config looked ok, you had "group radius" referenced in the
AAA method lists, and "group radius" uses all servers configured as
"radius-server host. So no need to define server groups here.

The message "check username/password; FAIL" shows that something is
wrong with the authentication data supplied to AAA while AAA tries to
construct the radius access-request. Can you add "debug ppp negotiation"
and "debug ppp authentication" to the debug and check which
username/password is being supplied? "debug aaa authentication" might
also help.

	oli

Stephen Fulton <> wrote on Tuesday, December 20, 2005 11:15 PM:

> gk at ax.tc wrote:
> 
> Thanks for pointing that out Gerald, I had removed it from the config
> in a previous attempt.  FWIW, I did add it again, but the result is
> still the same.  I will continue to persevere!
> 
> -- Stephen
> 
> 
> 
>> Hi,
>> 
>> you have referenced the AAA server group called 'radius**'...
>> 
>>> aaa authentication ppp default group radius**
>>> aaa authorization network default group radius**
>> 
>> ...but I miss the definition of that group in your config. Your
>> "radius-server" configurations in the end of the config will not be
>> used automagically. Try adding something like this:
>> 
>> !
>> aaa group server radius* radius**
>>  server x.x.x.x ...
>>  server y.y.y.y ...
>>  ...
>> !
>> 
>> *)  type
>> **) your group name ;-)
>> 
>> 
>>  -Gerald
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/