Table of Contents
Advertisement
Chapter 11
Configuring Local AAA Server, User Database—Domain to VRF
Command
Step 3
Router(config)# aaa authorization network
list-name local if-authenticated
Step 4
Router(config)# aaa accounting network
list-name start-stop group radius
Step 5
Router(config)# aaa authentication ppp
default local
Step 6
Router(config)# aaa authorization network
default local
Defining RADIUS and Enabling NAS-PORT
To define RADIUS and enable NAS-PORT, enter the following commands in global configuration mode:
Command
Step 1
Router(config)# radius-server host
ip-address auth-port 1645 acct-port 1646
key password
Step 2
Router(config)# radius-server attribute
nas-port format d
Defining a VRF
To define a VRF, enter the following commands beginning in global configuration mode:
Command
Step 1
Router(config)# ip vrf vrf-name
Step 2
Router(config-vrf)# rd
route-distinguisher
Step 3
Router(config-vrf)# route-target {import
| export | both}
route-target-ext-community
Applying AAA to a Virtual Template
To apply AAA to a virtual template, enter the following commands in global configuration mode:
Command
Step 1
Router(config)# interface
virtual-template number
Step 2
Router(config)# ppp mtu adaptive
Step 3
Router(config)# ppp authentication pap
chap
OL-2226-23
Purpose
Specifies to use the local profile if authenticated.
Specifies RADIUS accounting as optional.
Required to allow the definition of the AAA authentication list in
the AAA attribute list.
Required to allow the definition of the AAA authorization list in
the AAA attribute list.
Purpose
Defines the Radius server that AAA authentication, authorization
and accounting requests are sent to.
Defines NAS-Port information to be sent to the AAA accounting
server. (optional)
Purpose
Enters VRF configuration mode and defines the VRF instance by
assigning a VRF name.
Creates routing and forwarding tables.
Creates a list of import an export route target communities for the
specified VRF.
Purpose
Defines the virtual template to use for PPP.
For PPPoE, defines auto negotiation of MTU size.
Enables PAP, then CHAP, for PPP authentication.
Cisco 10000 Series Router Software Configuration Guide
11-7
Advertisement
Table of Contents
Troubleshooting
