[c-nsp] RADIUS Framed-Route attribute not being picked up by a 2610.

oboehmer at cisco.com oboehmer at cisco.com
Thu Sep 22 16:21:43 EDT 2005


Stephen Fulton <> wrote on Thursday, September 22, 2005 9:51 PM:

> Hi all,
> 
> I'm trying to configure an old 2610 (IOS v12.0(17)) to use the
> Framed-Route attribute it receives via RADIUS.  Authentication works
> fine, but the route does not seem to be picked up by the 2610.  I'm
> certain that the information by the RADIUS server is sound, as I've
> tested it against another NAS successfully, but here is the record
> I've been using:

> 
> Again, I'm able to authenticate properly and access the network
> afterwads, but here's the revelant AAA section in case I missed
> something: 
> 
>    aaa new-model
>    aaa authentication login default line
>    aaa authentication ppp default radius
>    aaa accounting network default start-stop radius

try adding "aaa authorization network default radius". applying routes
is part of network authorization, so you need to enable it to use
Radius..

	oli



More information about the cisco-nsp mailing list