Cisco 10000-2P2-2DC Software Configuration Manual page 177

Chapter 5 Configuring the Layer 2 Tunnel Protocol Access Concentrator and Network Server
Enabling Domain Preauthorization
To enable the LAC to perform domain authorization before tunneling, enter the following commands:
Command
Step 1
Router> enable
Step 2
Router# config terminal
Step 3
Router(config)# vpdn authorize domain
Example 5-3
!
aaa new-model
aaa authorization network default local group radius
!
vpdn authorize domain
!
radius-server host 10.16.9.9 auth-port 1645 acct-port 1646
radius-server attribute nas-port format d
radius-server key MyKey
radius-server vsa send authentication
!
Verifying Domain Preauthorization
To verify that you successfully enabled domain preauthorization, enter the following commands:
Command
Router# show running-config
Router# show vpdn tunnel
Router# show vpdn session
Configuring the LAC to Communicate with the RADIUS Server
To enable the LAC to communicate properly with the RADIUS server for tunnel service authorization,
enter the following commands:
Command
Step 1
Router> enable
Step 2
Router# config terminal
Step 3
Router(config)# radius-server host
{hostname | ip-address} [auth-port
port-number] [acct-port port-number]
Step 4
Router(config)# radius-server retransmit
retries
OL-2226-23
Purpose
Enters privileged EXEC mode.
Enters global configuration mode.
Enables domain preauthorization.
Enabling Domain Preauthorization
Purpose
Verifies that you successfully configured the maximum number
of sessions per tunnel.
Verifies active L2TP tunnel information in a VPDN environment.
Verifies active L2TP sessions in a VPDN environment.
Purpose
Enters privileged EXEC mode.
Enters global configuration mode.
Specifies the RADIUS server host.
Specifies the number of times the Cisco IOS software searches the
list of RADIUS server hosts before giving up. The default number
of retries is 3 attempts.
Cisco 10000 Series Router Software Configuration Guide
Layer 2 Access Concentrator
5-11