Table of Contents
Advertisement
Chapter 5
Configuring the Layer 2 Tunnel Protocol Access Concentrator and Network Server
Command
Step 4
Router(config)# aaa authorization network
list-name method1 [method2...]
Step 5
Router(config)# aaa accounting {system
default [vrf vrf-name] | network {default
| none | start-stop | stop-only |
wait-start} group group-name
Step 6
Router(config)# aaa accounting
delay-start vrf vrf-name
Step 7
Router(config)# aaa accounting send
stop-record authentication failure vrf
vrf-name
OL-2226-23
Purpose
Sets parameters that restrict user access to a network.
The list-name argument is a character string used to name the list
of authentication methods tried when a user logs in.
The method1[method2...] argument is at least one of the following
keywords:
•
group radius—Uses the list of all RADIUS servers for
authentication.
group group-name—Uses a subset of RADIUS servers for
•
authentication as defined by the aaa group server radius
command.
if-authenticated—Succeeds if user has been successfully
•
authenticated.
local—Uses the local username database for authentication.
•
none—Uses no authentication.
•
Enables AAA accounting of requested services for billing or
security purposes when you use RADIUS.
The system default keyword performs accounting for all
system-level events not associated with users, such as reloads.
The vrf vrf-name keyword and argument specify a VRF
configuration.
The network keyword runs accounting for all network-related
service requests.
The default keyword specifies the default accounting list:
none—No accounting.
•
start-stop—Record stop and start without waiting.
•
stop-only—Record stop when service terminates.
•
wait-start—Record stop and start after start-record commit.
•
The group group-name keyword and argument use a subset of
RADIUS servers for accounting as defined by the server group
group-name.
Delays generation of the start accounting records until the user
IP address is established.
The vrf vrf-name keyword and argument enables the specification
on a per VRF basis.
Generates accounting stop records for users who fail to
authenticate at login or during session negotiation.
The vrf vrf-name keyword and argument enables the specification
on a per VRF basis.
Cisco 10000 Series Router Software Configuration Guide
L2TP Network Server
5-33
Advertisement
Table of Contents
Troubleshooting
