paulcole at eti
Oct 8, 2009, 12:11 PM
Post #3 of 4
(3061 views)
Permalink
|
|
Re: Help configuring 2 radius servers in PPPoe
[In reply to]
|
|
Hi Frank,
Yes, we have different virtual templates.
I’ve tried this set up but can’t get it to work so far :
aaa group server radius eti
server 192.168.0.190 auth-port 1812 acct-port 1813
!
aaa group server radius billing
server 192.168.0.200 auth-port 1812 acct-port 1813
!
aaa authentication login local_auth local
aaa authentication ppp default none
aaa authentication ppp eti group eti
aaa authentication ppp billing group billing
aaa authorization exec default none
aaa authorization exec eti group eti
aaa authorization exec billing group billing
aaa authorization network default none
aaa authorization network eti group eti
aaa authorization network billing group billing
aaa accounting delay-start
aaa accounting update periodic 5
aaa accounting exec eti start-stop group eti
aaa accounting exec billing start-stop group billing
aaa accounting network eti start-stop group eti
aaa accounting network billing start-stop group billing
bba-group pppoe clients_billing
virtual-template 100
sessions per-mac limit 1
!
bba-group pppoe clients_pppoe
virtual-template 200
sessions per-mac limit 1
!
!
interface FastEthernet0/0
no ip address
ip route-cache flow
load-interval 30
duplex auto
speed auto
no cdp enable
!
interface FastEthernet0/0.55
description interface Vlan des clients du billing
encapsulation dot1Q 55
pppoe enable group clients_billing
no cdp enable
!
interface FastEthernet0/0.250
description interface vlan des clients classiques
encapsulation dot1Q 250
ip address 172.20.20.1 255.255.255.0
pppoe enable group clients_pppoe
no cdp enable
!
interface FastEthernet0/1
ip address 192.168.0.210 255.255.255.0
ip route-cache flow
load-interval 30
duplex auto
speed auto
!
interface Virtual-Template100
description parametres connections clients billing
mtu 1492
ip unnumbered FastEthernet0/1
load-interval 30
peer default ip address pool Pool1
ppp authentication pap
ppp authorization billing
ppp accounting billing
!
interface Virtual-Template200
description parametres connections clients pppoe classiques
mtu 1492
ip unnumbered FastEthernet0/1
load-interval 30
peer default ip address pool etitest
ppp authentication pap
ppp authorization eti
ppp accounting eti
!
radius-server attribute 44 include-in-access-req
radius-server attribute 8 include-in-access-req
radius-server attribute 32 include-in-access-req
radius-server host 192.168.0.190 auth-port 1812 acct-port 1813 key hello
radius-server host 192.168.0.200 auth-port 1812 acct-port 1813 key orange
I’ve tried this set up but the connection stucks at the LCP stage with this
error :
LCP: received AAA AUTHOR Response FAIL
Any hints ?
____________________________________________________________________________
_____
Paul
De : Frank Bulk - iName.com [mailto:frnkblk [at] iname]
Envoyé : jeudi 8 octobre 2009 15:53
À : 'Paul Cole'; cisco-bba [at] puck
Objet : RE: [cisco-bba] Help configuring 2 radius servers in PPPoe
Do these customers user different Virtual-Templates? If so, I believe you
can assign the radius information in the Virtual-Template, overriding those
set at the global level.
Frank
From: cisco-bba-bounces [at] puck
[mailto:cisco-bba-bounces [at] puck] On Behalf Of Paul Cole
Sent: Thursday, October 08, 2009 5:12 AM
To: cisco-bba [at] puck
Subject: [cisco-bba] Help configuring 2 radius servers in PPPoe
Hi,
I have a 7206VXR router connected to two radius servers and sending radius
attributes to those servers.
I have already set up the conf as this:
aaa group server radius test
Server aaaa.aaaa.aaaa.aaaa auth-port 1812 acct-port 1813
Server bbbb.bbbb.bbbb.bbbb auth-port 1812 acct-port 1813
And then
Radius-server host aaaa.aaaa.aaaa.aaaa auth-port 1812 acct-port 1813
Radius-server host bbbb.bbbb.bbbb.bbbb auth-port 1812 acct-port 1813
Radius-server key key_for_aaaa
Radius-server key key_for_bbbb
Radius-server vsa send accounting
Radius-server vsa send authentication
Is there any way to link each radius server (aaaa or bbbb) with its key (how
does it work ? does the key being sent to both radius aaaa and bbbb and then
radius checks against its own key ?
Also, I don’t want to send to both of them (radius aaa will be for a
specific category of users in a specific vlan and the same goes to radius
bbbb) the same accounting infos as radius aaaa will be receiving different
set of infos than radius bbbb.
How can I achieve this ? Is there any way to send some accounting infos to
radius aaaa only for users in vlan aaaa and accounting infos to radius bbbb
for users in vlan bbbb ?
Thanks for your help.
____________________________________________________________________________
____
Paul
|
