Cisco 10000-2P2-2DC Software Configuration Manual page 200

L2TP Network Server
Configuring RADIUS-Specific Commands for the VRF
To configure AAA global RADIUS-specific commands for the VRF definition, enter the following
commands:
Command
Step 1
Router> enable
Step 2
Router# config terminal
Step 3
Router(config)# interface
virtual-template number
Step 4
Router(config-if)# ip vrf forwarding
vrf-name
Step 5
Router(config-if)# ppp authentication
{protocol1 [protocol2...]} list-name
Step 6
Router(config-if)# ppp authorization
list-name
Step 7
Router(config-if)# ppp accounting
list-name
Step 8
Router(config-if)# exit
Step 9
Router(config)# ip radius
source-interface subinterface-name vrf
vrf-name
Cisco 10000 Series Router Software Configuration Guide
5-34
Chapter 5 Configuring the Layer 2 Tunnel Protocol Access Concentrator and Network Server
Purpose
Enters privileged EXEC mode.
Enters global configuration mode.
Configures a virtual template interface and enters interface
configuration mode.
Associates a VRF instance with a virtual template interface.
The vrf-name argument is the name assigned to a VRF.
Enables Challenge Handshake Authentication Protocol (CHAP)
or Password Authentication Protocol (PAP) or both and specifies
the order in which CHAP and PAP authentication are selected on
the interface.
The protocol1[protocol2...] argument specifies at least one of the
following keywords:
chap—Enables CHAP on a serial interface.
•
ms-chap—Enables Microsoft's version of CHAP
•
(MS-CHAP) on a serial interface.
pap—Enables PAP on a serial interface.
•
The list-name argument (optional) specifies the name of a list of
methods of authentication to use. This is the same name you
specified in step 4 of the
on page 5-32. If no list name is specified, the system uses the
default. Create the list by using the aaa authentication ppp
command.
Enables AAA authorization on the selected interface.
The list-name argument (optional) specifies the name of a list of
authorization methods to use. If no list name is specified, the
system uses the default. Create the list by using the aaa
authorization command.
Enables AAA accounting services on the selected interface.
Exits interface configuration mode.
Forces RADIUS to use the IP address of a specified interface for
all outgoing RADIUS packets and enables the specification on a
per VRF basis.
The subinterface-name argument specifies the name of the
interface that RADIUS uses for all of its outgoing packets.
The vrf vrf-name keyword and argument specify the per
VRF configuration.
"Configuring AAA for the VRF" section
OL-2226-23