Table of Contents
Advertisement
L2TP Network Server
Command
Step 4
Router(config-sg-radius)# server-private
ip-address timeout seconds retransmit
retries key string
Step 5
Router(config-sg-radius)# ip vrf
forwarding vrf-name
Configuring AAA for the VRF
To configure AAA for the VRF, enter the following commands:
Command
Step 1
Router> enable
Step 2
Router# config terminal
Step 3
Router(config)# aaa authentication ppp
list-name method1 [method2...]
Cisco 10000 Series Router Software Configuration Guide
5-32
Chapter 5
Configuring the Layer 2 Tunnel Protocol Access Concentrator and Network Server
Purpose
Configures the IP address of the private RADIUS server for the
group server.
The ip-address argument specifies the IP address of the private
RADIUS server host.
(Optional) The seconds argument specifies the timeout value (1 to
1000).
The string argument specifies the authentication and encryption
key for all RADIUS communications between the Cisco 10000
series router and the RADIUS server.
Configures the VRF reference of the AAA RADIUS server group.
The vrf-name argument is the name assigned to a VRF instance.
Purpose
Enters privileged EXEC mode.
Enters global configuration mode.
Specifies one or more AAA authentication methods for use on
serial interfaces running PPP.
The list-name argument is a character string used to name the list
of authentication methods tried when a user logs in.
The method1[method2...] argument is at least one of the following
keywords:
•
if-needed—Does not authenticate if user has already been
authenticated on a TTY line.
•
local—Uses the local username database for authentication.
•
local-case—Uses case-sensitive local username
authentication.
•
none—Uses no authentication.
•
group radius—Uses the list of all RADIUS servers for
authentication.
•
group group-name—Uses a subset of RADIUS servers for
authentication as defined by the aaa group server radius
command.
OL-2226-23
Advertisement
Table of Contents
Troubleshooting
