Document ID: 9348
Contents
Introduction
Prerequisites
Requirements
Components Used
Conventions
Background Information
Workaround
Configure
Configurations
Verify
Troubleshoot
Troubleshooting Commands
Related Information
Introduction
This document provides a sample configuration for accepting V.120 and PPP calls when using authentication, authorization, and accounting (AAA) to authenticate and authorize users on a Cisco AS5x00 platform.
Prerequisites
Requirements
There are no specific requirements for this document.
Components Used
The information in this document is based on the software and hardware versions below.
-
Cisco IOS Software Release 12.2(3).
Note: Please use Cisco IOS® Software Release 12.1(9), 12.2(2) or higher, in which the peer default ip add command is supported.
The information presented in this document was created from devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If you are working in a live network, ensure that you understand the potential impact of any command before using it.
Conventions
For more information on document conventions, see the Cisco Technical Tips Conventions.
Background Information
Each incoming V.120 call is forwarded to a VTY line and starts an Exec session. If you do not define a specific method, the default method is used. The router waits for the user to authenticate before starting a PPP session.
Note: If you have defined a default method for the authorization exec, authorization also starts.
To avoid this problem, add the following lines to your configuration:
aaa authentication login V.120 none aaa authorization exec V.120 none ... line vty x y login authentication V.120 authorization exec V.120 autocommand ppp negotiate transport input V.120
Workaround
Add the following commands to the virtual-template: peer default ip add pool <dump_local_name> and ppp ipcp accept_address.
V.120 can be detected in the incoming ISDN setup message (through the bearer capability ) using the autodetect inside the High-Level Data Link Control (HDLC) controller.
You can force all incoming calls to be V.120 calls by using the isdn all-incoming-calls-V.120 command on the ISDN D-channel. This command can help when trying to reproduce a problem where the V.120 terminal adapter does not send the appropriate bearer capability.
Configure
In this section, you are presented with the information to configure the features described in this document.
Note: To find additional information on the commands used in this document, use the Command Lookup Tool (registered customers only) .
Configurations
This document uses the configuration shown below.
|
Monica |
|---|
hostname monica ! aaa new-model aaa authentication login default group tacacs+ local aaa authentication login V.120 none !--- To avoid authorization of initial exec session for V.120. aaa authentication ppp default group tacacs+ aaa authorization exec V.120 none ! --- If authorization exec is used. aaa authorization network default group tacacs+ ! enable password <password> username olive password 0 <password> spe 1/0 1/9 firmware location bootflash:pw2910.bin ! ! resource-pool disable ! vty-async vty-async virtual-template 1 isdn switch-type primary-net5! interface Loopback0 ip address 4.1.1.1 255.255.255.255 ! interface Ethernet0 ip address dhcp ! interface Virtual-Template1 ip unnumbered Loopback0 ip tcp header-compression passive no peer default ip address ! --- Please be aware of Cisco Bug ID CSCdt59455. ppp authentication chap ! interface Serial0 no ip address shutdown no fair-queue clockrate 2015232 ! interface Serial1 no ip address shutdown no fair-queue clockrate 2015232 ! interface Serial2 no ip address shutdown no fair-queue clockrate 2015232 ! interface Serial3 no ip address shutdown no fair-queue clockrate 2015232 ! interface Serial0:15 ip unnumbered Ethernet0 encapsulation ppp dialer rotary-group 2 autodetect encapsulation ppp V.120 isdn switch-type primary-net5 isdn incoming-voice modem isdn T321 0 ppp authentication pap ISDN-noauthen ppp multilink ! interface FastEthernet0 no ip address shutdown duplex auto speed auto ! interface Group-Async0 ip unnumbered Ethernet0 encapsulation ppp async mode interactive peer default ip address pool isdn_pool ppp authentication pap group-range 1 60 ! interface Dialer2 ip unnumbered Ethernet0 encapsulation ppp load-interval 30 dialer in-band dialer-group 1 peer default ip address pool isdn_pool ppp multilink ! ip local pool isdn_pool 217.52.37.23 217.52.37.32 ip classless no ip http server ! dialer-list 1 protocol ip permit tacacs-server host 10.200.20.133 key cisco ! ! ! line con 0 exec-timeout 0 0 line 1 60 modem InOut autoselect during-login autoselect ppp line aux 0 line vty 0 4 exec-timeout 0 0 password <password> transport input telnet line vty 5 39 transport input telnet line vty 40 100 login authentication V.120 authorization exec V.120 autocommand ppp negotiate transport input V.120 ! ntp clock-period 17180124 ntp server 10.200.20.134 end |
Verify
There is currently no verification procedure available for this configuration.
Troubleshoot
This section provides information you can use to troubleshoot your configuration.
Troubleshooting Commands
Certain show commands are supported by the Output Interpreter Tool (registered customers only) , which allows you to view an analysis of show command output.
Note: Before issuing debug commands, please see Important Information on Debug Commands.
-
debug modem - Observes modem line activity on an access server.
-
debug tacacs - Displays information associated with the Terminal Access Controller Access Control System (TACACS).
-
debug aaa authentication - Displays information on AAA/Terminal Access Controller Access Control System Plus (TACACS+) authentication.
-
debug aaa authorization - Displays information on AAA/TACACS+ authorization.
-
debug v120 event - Displays information on V.120 activity.
-
debug ppp negotiation - Causes the debug ppp command to display PPP packets transmitted during PPP startup, where PPP options are negotiated.
-
debug isdn q931 - Displays information about call setup and teardown of ISDN network connections (Layer 3) between the local router (user side) and the network.
The debug output below was produced by entering these commands.
Note: In the following output, you can see that cloning fails and resets line by virtual exec.
General OS: Modem control/process activation debugging is on TACACS access control debugging is on AAA Authentication debugging is on AAA Authorization debugging is on V.120: V.120 events debugging is on PPP: PPP protocol negotiation debugging is on ISDN: ISDN Q931 packets debugging is on ISDN Q931 packets debug DSLs. (On/Off/No DSL:1/0/-) DSL 0 --> 7 1 - - - - - - - Nov 8 06:50:24.964: ISDN Se0:15: RX <- SETUP pd = 8 callref = 0x7351 Nov 8 06:50:24.964: Sending Complete Nov 8 06:50:24.964: Bearer Capability i = 0x8890 Nov 8 06:50:24.964: Channel ID i = 0xA1838C Nov 8 06:50:24.964: Calling Party Number i = 0xA1, '6080', Plan:ISDN, Type:National Nov 8 06:50:24.964: Called Party Number i = 0x81, '210', Plan:ISDN, Type:Unknown Nov 8 06:50:24.968: Locking Shift to Codeset 6 Nov 8 06:50:24.968: Codeset 6 IE 0x28 i = 'ISDN-EDU-1' Nov 8 06:50:24.968: AAA/ACCT/DS0: channel=11, ds1=0, t3=0, slot=0, ds0=11 Nov 8 06:50:24.972: AAA/ACCT/DS0: channel=11, ds1=0, t3=0, slot=0, ds0=11 Nov 8 06:50:24.972: AAA/ACCT/DS0: channel=11, ds1=0, t3=0, slot=0, ds0=11 Nov 8 06:50:24.972: %LINK-3-UPDOWN: Interface Serial0:11, changed state to up Nov 8 06:50:24.972: ISDN Se0:15: TX -> CALL_PROC pd = 8 callref = 0xF351 Nov 8 06:50:24.976: Channel ID i = 0xA9838C Nov 8 06:50:24.976: ISDN Se0:15: TX -> CONNECT pd = 8 callref = 0xF351 Nov 8 06:50:24.976: Channel ID i = 0xA9838C Nov 8 06:50:25.024: ISDN Se0:15: RX <- CONNECT_ACK pd = 8 callref = 0x7351 Nov 8 06:50:25.024: ISDN Se0:15: CALL_PROGRESS: CALL_CONNECTED call id 0xAE, bchan 11, dsl 0 Nov 8 06:50:25.060: V.120: Autodetect trying to detect V.120 mode on Se0:11 Nov 8 06:50:25.060: V.120 sampled pkt: 3 bytes: 8 1 7F Nov 8 06:50:25.064: Se0:11-V.120 started - Setting default V.120 parameters Nov 8 06:50:25.064: TTY102: EXEC creation Nov 8 06:50:25.064: AAA: parse name=tty102 idb type=13 tty=-1 Nov 8 06:50:25.064: AAA: name=tty102 flags=0x11 type=5 shelf=0 slot=0 adapter=0 port=102 channel=0 Nov 8 06:50:25.064: AAA: parse name=Serial0:11 idb type=13 tty=-1 Nov 8 06:50:25.064: AAA: name=Serial0:11 flags=0x51 type=1 shelf=0 slot=0 adapter=0 port=0 channel=11 Nov 8 06:50:25.064: AAA/ACCT/DS0: channel=11, ds1=0, t3=0, slot=0, ds0=11 Nov 8 06:50:25.064: AAA/MEMORY: create_user (0x6205CD3C) user='NULL' ruser='NULL' port='tty102' rem_addr='6080/210' authen_type=ASCII service=LOGIN priv=1 initial_task_id='0' Nov 8 06:50:25.064: AAA/AUTHEN/START (2943985846): port='tty102' list='V.120' action=LOGIN service=LOGIN Nov 8 06:50:25.064: AAA/AUTHEN/START (2943985846): found list V.120 Nov 8 06:50:25.064: AAA/AUTHEN/START (2943985846): Method=NONE Nov 8 06:50:25.064: AAA/AUTHEN (2943985846): status = PASS Nov 8 06:50:25.064: TTY102: create timer type 1, 600 seconds Nov 8 06:50:25.112: Vi1 PPP: Phase is DOWN, Setup [0 sess, 0 load] Nov 8 06:50:25.136: V.120extablished handle = 0 Nov 8 06:50:25.140: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up Nov 8 06:50:25.140: Vi1 PPP: Treating connection as a dedicated line Nov 8 06:50:25.140: Vi1 PPP: Phase is ESTABLISHING, Active Open [0 sess, 0 load] Nov 8 06:50:25.140: Vi1 AAA/AUTHOR/FSM: (0): LCP succeeds trivially Nov 8 06:50:25.140: Vi1 LCP: O CONFREQ [Closed] id 1 len 25 Nov 8 06:50:25.140: Vi1 LCP: ACCM 0x000A0000 (0x0206000A0000) Nov 8 06:50:25.140: Vi1 LCP: AuthProto CHAP (0x0305C22305) Nov 8 06:50:25.140: Vi1 LCP: MagicNumber 0x19ADD6C8 (0x050619ADD6C8) Nov 8 06:50:25.140: Vi1 LCP: PFC (0x0702) Nov 8 06:50:25.140: Vi1 LCP: ACFC (0x0802) Nov 8 06:50:25.640: TTY102: destroy timer type 1 Nov 8 06:50:25.640: TTY102: no timer type 0 to destroy Nov 8 06:50:25.676: Vi1 LCP: I CONFACK [REQsent] id 1 len 25 Nov 8 06:50:25.676: Vi1 LCP: ACCM 0x000A0000 (0x0206000A0000) Nov 8 06:50:25.676: Vi1 LCP: AuthProto CHAP (0x0305C22305) Nov 8 06:50:25.676: Vi1 LCP: MagicNumber 0x19ADD6C8 (0x050619ADD6C8) Nov 8 06:50:25.676: Vi1 LCP: PFC (0x0702) Nov 8 06:50:25.676: Vi1 LCP: ACFC (0x0802) Nov 8 06:50:26.136: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0:11, changed state to up Nov 8 06:50:27.140: Vi1 LCP: TIMEout: State ACKrcvd Nov 8 06:50:27.140: Vi1 LCP: O CONFREQ [ACKrcvd] id 2 len 25 Nov 8 06:50:27.140: Vi1 LCP: ACCM 0x000A0000 (0x0206000A0000) Nov 8 06:50:27.140: Vi1 LCP: AuthProto CHAP (0x0305C22305) Nov 8 06:50:27.140: Vi1 LCP: MagicNumber 0x19ADD6C8 (0x050619ADD6C8) Nov 8 06:50:27.140: Vi1 LCP: PFC (0x0702) Nov 8 06:50:27.140: Vi1 LCP: ACFC (0x0802) Nov 8 06:50:27.176: Vi1 LCP: I CONFACK [REQsent] id 2 len 25 Nov 8 06:50:27.176: Vi1 LCP: ACCM 0x000A0000 (0x0206000A0000) Nov 8 06:50:27.176: Vi1 LCP: AuthProto CHAP (0x0305C22305) Nov 8 06:50:27.176: Vi1 LCP: MagicNumber 0x19ADD6C8 (0x050619ADD6C8) Nov 8 06:50:27.176: Vi1 LCP: PFC (0x0702) Nov 8 06:50:27.176: Vi1 LCP: ACFC (0x0802) Nov 8 06:50:28.096: Vi1 LCP: I CONFREQ [ACKrcvd] id 2 len 23 Nov 8 06:50:28.096: Vi1 LCP: ACCM 0x000A0000 (0x0206000A0000) Nov 8 06:50:28.096: Vi1 LCP: MagicNumber 0x03B6B22B (0x050603B6B22B) Nov 8 06:50:28.096: Vi1 LCP: PFC (0x0702) Nov 8 06:50:28.096: Vi1 LCP: ACFC (0x0802) Nov 8 06:50:28.096: Vi1 LCP: Callback 6 (0x0D0306) Nov 8 06:50:28.096: Vi1 LCP: O CONFREJ [ACKrcvd] id 2 len 7 Nov 8 06:50:28.096: Vi1 LCP: Callback 6 (0x0D0306) Nov 8 06:50:28.124: Vi1 LCP: I CONFREQ [ACKrcvd] id 3 len 20 Nov 8 06:50:28.124: Vi1 LCP: ACCM 0x000A0000 (0x0206000A0000) Nov 8 06:50:28.128: Vi1 LCP: MagicNumber 0x03B6B22B (0x050603B6B22B) Nov 8 06:50:28.128: Vi1 LCP: PFC (0x0702) Nov 8 06:50:28.128: Vi1 LCP: ACFC (0x0802) Nov 8 06:50:28.128: Vi1 LCP: O CONFACK [ACKrcvd] id 3 len 20 Nov 8 06:50:28.128: Vi1 LCP: ACCM 0x000A0000 (0x0206000A0000) Nov 8 06:50:28.128: Vi1 LCP: MagicNumber 0x03B6B22B (0x050603B6B22B) Nov 8 06:50:28.128: Vi1 LCP: PFC (0x0702) Nov 8 06:50:28.128: Vi1 LCP: ACFC (0x0802) Nov 8 06:50:28.128: Vi1 LCP: State is Open Nov 8 06:50:28.128: Vi1 PPP: Phase is AUTHENTICATING, by this end [0 sess, 0 load] Nov 8 06:50:28.128: Vi1 CHAP: O CHALLENGE id 6 len 27 from "monica" Nov 8 06:50:28.164: Vi1 CHAP: I RESPONSE id 6 len 26 from "olive" Nov 8 06:50:28.168: AAA: parse name=Virtual-Access1 idb type=21 tty=102 Nov 8 06:50:28.168: AAA: name=Virtual-Access1 flags=0x11 type=5 shelf=0 slot=0 adapter=0 port=1 channel=0 Nov 8 06:50:28.168: AAA: parse name=Serial0:11 idb type=13 tty=-1 Nov 8 06:50:28.168: AAA: name=Serial0:11 flags=0x51 type=1 shelf=0 slot=0 adapter=0 port=0 channel=11 Nov 8 06:50:28.168: AAA/ACCT/DS0: channel=11, ds1=0, t3=0, slot=0, ds0=11 Nov 8 06:50:28.168: AAA/MEMORY: create_user (0x6205C97C) user='olive' ruser='NULL' port='Virtual-Access1' rem_addr='6080/210' authen_type=CHAP service=PPP priv=1 initial_task_id='0' Nov 8 06:50:28.168: AAA/AUTHEN/START (3173770425): port='Virtual-Access1' list='' action=LOGIN service=PPP Nov 8 06:50:28.168: AAA/AUTHEN/START (3173770425): using "default" list Nov 8 06:50:28.168: AAA/AUTHEN/START (3173770425): Method=tacacs+ (tacacs+) Nov 8 06:50:28.168: TAC+: send AUTHEN/START packet ver=193 id=3173770425 Nov 8 06:50:28.168: TAC+: Using default tacacs server-group "tacacs+" list. Nov 8 06:50:28.168: TAC+: Opening TCP/IP to 10.200.20.133/49 timeout=5 Nov 8 06:50:28.172: TAC+: Opened TCP/IP handle 0x6205CEDC to 10.200.20.133/49 Nov 8 06:50:28.172: TAC+: 10.200.20.133 (3173770425) AUTHEN/START/LOGIN/CHAP queued Nov 8 06:50:28.372: TAC+: (3173770425) AUTHEN/START/LOGIN/CHAP processed Nov 8 06:50:28.372: TAC+: ver=193 id=3173770425 received AUTHEN status = PASS Nov 8 06:50:28.372: AAA/AUTHEN (3173770425): status = PASS Nov 8 06:50:28.372: TAC+: Closing TCP/IP 0x6205CEDC connection to 10.200.20.133/49 Nov 8 06:50:28.372: Vi1 AAA/AUTHOR/LCP: Authorize LCP Nov 8 06:50:28.372: Vi1 AAA/AUTHOR/LCP (2695753846): Port='Virtual-Access1' list='' service=NET Nov 8 06:50:28.372: AAA/AUTHOR/LCP: Vi1 (2695753846) user='olive' Nov 8 06:50:28.372: Vi1 AAA/AUTHOR/LCP (2695753846): send AV service=ppp Nov 8 06:50:28.372: Vi1 AAA/AUTHOR/LCP (2695753846): send AV protocol=lcp Nov 8 06:50:28.372: Vi1 AAA/AUTHOR/LCP (2695753846): found list "default" Nov 8 06:50:28.372: Vi1 AAA/AUTHOR/LCP (2695753846): Method=tacacs+ (tacacs+) Nov 8 06:50:28.372: AAA/AUTHOR/TAC+: (2695753846): user=olive Nov 8 06:50:28.372: AAA/AUTHOR/TAC+: (2695753846): send AV service=ppp Nov 8 06:50:28.372: AAA/AUTHOR/TAC+: (2695753846): send AV protocol=lcp Nov 8 06:50:28.372: TAC+: using previously set server 10.200.20.133 from group tacacs+ Nov 8 06:50:28.372: TAC+: Opening TCP/IP to 10.200.20.133/49 timeout=5 Nov 8 06:50:28.376: TAC+: Opened TCP/IP handle 0x6205DF0C to 10.200.20.133/49 Nov 8 06:50:28.376: TAC+: Opened 10.200.20.133 index=1 Nov 8 06:50:28.376: TAC+: 10.200.20.133 (2695753846) AUTHOR/START queued Nov 8 06:50:28.576: TAC+: (2695753846) AUTHOR/START processed Nov 8 06:50:28.576: TAC+: (2695753846): received author response status = PASS_ADD Nov 8 06:50:28.576: TAC+: Closing TCP/IP 0x6205DF0C connection to 10.200.20.133/49 Nov 8 06:50:28.576: Vi1 AAA/AUTHOR (2695753846): Post authorization status = PASS_ADD Nov 8 06:50:28.576: AAA/MEMORY: free_user (0x6205CD3C) user='NULL' ruser='NULL' port='tty102' rem_addr='6080/210' authen_type=ASCII service=LOGIN priv=1 Nov 8 06:50:28.576: Vi1 CHAP: O SUCCESS id 6 len 4 Nov 8 06:50:28.576: Vi1 PPP: Phase is UP [0 sess, 0 load] Nov 8 06:50:28.576: Vi1 AAA/AUTHOR/FSM: (0): Can we start IPCP? Nov 8 06:50:28.576: Vi1 AAA/AUTHOR/FSM (1382427768): Port='Virtual-Access1' list='' service=NET Nov 8 06:50:28.576: AAA/AUTHOR/FSM: Vi1 (1382427768) user='olive' Nov 8 06:50:28.576: Vi1 AAA/AUTHOR/FSM (1382427768): send AV service=ppp Nov 8 06:50:28.576: Vi1 AAA/AUTHOR/FSM (1382427768): send AV protocol=ip Nov 8 06:50:28.576: Vi1 AAA/AUTHOR/FSM (1382427768): found list "default" Nov 8 06:50:28.576: Vi1 AAA/AUTHOR/FSM (1382427768): Method=tacacs+ (tacacs+) Nov 8 06:50:28.576: AAA/AUTHOR/TAC+: (1382427768): user=olive Nov 8 06:50:28.576: AAA/AUTHOR/TAC+: (1382427768): send AV service=ppp Nov 8 06:50:28.576: AAA/AUTHOR/TAC+: (1382427768): send AV protocol=ip Nov 8 06:50:28.576: TAC+: using previously set server 10.200.20.133 from group tacacs+ Nov 8 06:50:28.576: TAC+: Opening TCP/IP to 10.200.20.133/49 timeout=5 Nov 8 06:50:28.580: TAC+: Opened TCP/IP handle 0x622C4158 to 10.200.20.133/49 Nov 8 06:50:28.580: TAC+: Opened 10.200.20.133 index=1 Nov 8 06:50:28.580: TAC+: 10.200.20.133 (1382427768) AUTHOR/START queued Nov 8 06:50:28.608: Vi1 IPCP: I CONFREQ [Closed] id 1 len 40 Nov 8 06:50:28.608: Vi1 IPCP: CompressType VJ 15 slots CompressSlotID (0x0206002D0F01) Nov 8 06:50:28.608: Vi1 IPCP: Address 10.10.10.1 (0x03060A0A0A01) Nov 8 06:50:28.608: Vi1 IPCP: PrimaryDNS 0.0.0.0 (0x810600000000) Nov 8 06:50:28.608: Vi1 IPCP: PrimaryWINS 0.0.0.0 (0x820600000000) Nov 8 06:50:28.608: Vi1 IPCP: SecondaryDNS 0.0.0.0 (0x830600000000) Nov 8 06:50:28.608: Vi1 IPCP: SecondaryWINS 0.0.0.0 (0x840600000000) Nov 8 06:50:28.612: Vi1 CCP: I CONFREQ [Closed] id 1 len 15 Nov 8 06:50:28.612: Vi1 CCP: MS-PPC supported bits 0x00000001 (0x120600000001) Nov 8 06:50:28.612: Vi1 CCP: Stacker history 1 check mode EXTENDED (0x1105000104) Nov 8 06:50:28.612: Vi1 LCP: O PROTREJ [Open] id 3 len 21 protocol CCP Nov 8 06:50:28.612: Vi1 LCP: (0x80FD0101000F12060000000111050001) Nov 8 06:50:28.612: Vi1 LCP: (0x04) Nov 8 06:50:28.780: TAC+: (1382427768) AUTHOR/START processed Nov 8 06:50:28.780: TAC+: (1382427768): received author response status = PASS_ADD Nov 8 06:50:28.780: TAC+: Closing TCP/IP 0x622C4158 connection to 10.200.20.133/49 Nov 8 06:50:28.780: Vi1 AAA/AUTHOR (1382427768): Post authorization status = PASS_ADD Nov 8 06:50:28.780: Vi1 AAA/AUTHOR/FSM: We can start IPCP Nov 8 06:50:28.780: Vi1 IPCP: O CONFREQ [Closed] id 1 len 16 Nov 8 06:50:28.780: Vi1 IPCP: CompressType VJ 15 slots (0x0206002D0F00) Nov 8 06:50:28.780: Vi1 IPCP: Address 4.1.1.1 (0x030604010101) Nov 8 06:50:28.780: Vi1 AAA/AUTHOR/FSM: (0): Can we start CDPCP? Nov 8 06:50:28.780: Vi1 AAA/AUTHOR/FSM (1811637780): Port='Virtual-Access1' list='' service=NET Nov 8 06:50:28.780: AAA/AUTHOR/FSM: Vi1 (1811637780) user='olive' Nov 8 06:50:28.780: Vi1 AAA/AUTHOR/FSM (1811637780): send AV service=ppp Nov 8 06:50:28.780: Vi1 AAA/AUTHOR/FSM (1811637780): send AV protocol=cdp Nov 8 06:50:28.780: Vi1 AAA/AUTHOR/FSM (1811637780): found list "default" Nov 8 06:50:28.780: Vi1 AAA/AUTHOR/FSM (1811637780): Method=tacacs+ (tacacs+) Nov 8 06:50:28.780: AAA/AUTHOR/TAC+: (1811637780): user=olive Nov 8 06:50:28.780: AAA/AUTHOR/TAC+: (1811637780): send AV service=ppp Nov 8 06:50:28.780: AAA/AUTHOR/TAC+: (1811637780): send AV protocol=cdp Nov 8 06:50:28.780: TAC+: using previously set server 10.200.20.133 from group tacacs+ Nov 8 06:50:28.780: TAC+: Opening TCP/IP to 10.200.20.133/49 timeout=5 Nov 8 06:50:28.784: TAC+: Opened TCP/IP handle 0x622C45F4 to 10.200.20.133/49 Nov 8 06:50:28.784: TAC+: Opened 10.200.20.133 index=1 Nov 8 06:50:28.784: TAC+: 10.200.20.133 (1811637780) AUTHOR/START queued Nov 8 06:50:28.804: Vi1 IPCP: I CONFACK [REQsent] id 1 len 16 Nov 8 06:50:28.804: Vi1 IPCP: CompressType VJ 15 slots (0x0206002D0F00) Nov 8 06:50:28.804: Vi1 IPCP: Address 4.1.1.1 (0x030604010101) Nov 8 06:50:28.984: TAC+: (1811637780) AUTHOR/START processed Nov 8 06:50:28.984: TAC+: (1811637780): received author response status = FAIL Nov 8 06:50:28.984: TAC+: Closing TCP/IP 0x622C45F4 connection to 10.200.20.133/49 Nov 8 06:50:28.984: Vi1 AAA/AUTHOR (1811637780): Post authorization status = FAIL Nov 8 06:50:28.984: Vi1 AAA/AUTHOR/FSM: We cannot start CDPCP Nov 8 06:50:28.984: Vi1 CDPCP: State is Closed Nov 8 06:50:29.576: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access1, changed state to up Nov 8 06:50:29.580: Vi1 PPP: Outbound cdp packet dropped, CDPCP is Closed [starting negotiations] Nov 8 06:50:29.580: Vi1 CDPCP: State is Closed Nov 8 06:50:29.584: Vi1 PPP: Outbound cdp packet dropped, CDPCP is Closed [starting negotiations] Nov 8 06:50:29.584: Vi1 CDPCP: State is Closed Nov 8 06:50:29.588: Vi1 PPP: Outbound cdp packet dropped, CDPCP is Closed [starting negotiations] Nov 8 06:50:29.588: Vi1 CDPCP: State is Closed Nov 8 06:50:29.592: Vi1 CDPCP: TIMEout: State Closed Nov 8 06:50:29.592: Vi1 CDPCP: State is Listen Nov 8 06:50:30.780: Vi1 IPCP: TIMEout: State ACKrcvd Nov 8 06:50:30.780: Vi1 IPCP: O CONFREQ [ACKrcvd] id 2 len 16 Nov 8 06:50:30.780: Vi1 IPCP: CompressType VJ 15 slots (0x0206002D0F00) Nov 8 06:50:30.780: Vi1 IPCP: Address 4.1.1.1 (0x030604010101) Nov 8 06:50:30.800: Vi1 IPCP: I CONFACK [REQsent] id 2 len 16 Nov 8 06:50:30.800: Vi1 IPCP: CompressType VJ 15 slots (0x0206002D0F00) Nov 8 06:50:30.804: Vi1 IPCP: Address 4.1.1.1 (0x030604010101) Nov 8 06:50:30.972: %ISDN-6-CONNECT: Interface Serial0:11 is now connected to 6080 Nov 8 06:50:31.600: Vi1 IPCP: I CONFREQ [ACKrcvd] id 2 len 40 Nov 8 06:50:31.600: Vi1 IPCP: CompressType VJ 15 slots CompressSlotID (0x0206002D0F01) Nov 8 06:50:31.600: Vi1 IPCP: Address 10.10.10.1 (0x03060A0A0A01) Nov 8 06:50:31.600: Vi1 IPCP: PrimaryDNS 0.0.0.0 (0x810600000000) Nov 8 06:50:31.600: Vi1 IPCP: PrimaryWINS 0.0.0.0 (0x820600000000) Nov 8 06:50:31.600: Vi1 IPCP: SecondaryDNS 0.0.0.0 (0x830600000000) Nov 8 06:50:31.600: Vi1 IPCP: SecondaryWINS 0.0.0.0 (0x840600000000) Nov 8 06:50:31.600: Vi1 AAA/AUTHOR/IPCP: Start. Her address 10.10.10.1, we want 0.0.0.0 Nov 8 06:50:31.600: Vi1 AAA/AUTHOR/IPCP (2414739179): Port='Virtual-Access1' list='' service=NET Nov 8 06:50:31.600: AAA/AUTHOR/IPCP: Vi1 (2414739179) user='olive' Nov 8 06:50:31.600: Vi1 AAA/AUTHOR/IPCP (2414739179): send AV service=ppp Nov 8 06:50:31.600: Vi1 AAA/AUTHOR/IPCP (2414739179): send AV protocol=ip Nov 8 06:50:31.600: Vi1 AAA/AUTHOR/IPCP (2414739179): send AV addr*10.10.10.1 Nov 8 06:50:31.600: Vi1 AAA/AUTHOR/IPCP (2414739179): found list "default" Nov 8 06:50:31.600: Vi1 AAA/AUTHOR/IPCP (2414739179): Method=tacacs+ (tacacs+) Nov 8 06:50:31.600: AAA/AUTHOR/TAC+: (2414739179): user=olive Nov 8 06:50:31.600: AAA/AUTHOR/TAC+: (2414739179): send AV service=ppp Nov 8 06:50:31.604: AAA/AUTHOR/TAC+: (2414739179): send AV protocol=ip Nov 8 06:50:31.604: AAA/AUTHOR/TAC+: (2414739179): send AV addr*10.10.10.1 Nov 8 06:50:31.604: TAC+: using previously set server 10.200.20.133 from group tacacs+ Nov 8 06:50:31.604: TAC+: Opening TCP/IP to 10.200.20.133/49 timeout=5 Nov 8 06:50:31.604: TAC+: Opened TCP/IP handle 0x622C6CB8 to 10.200.20.133/49 Nov 8 06:50:31.604: TAC+: Opened 10.200.20.133 index=1 Nov 8 06:50:31.604: TAC+: 10.200.20.133 (2414739179) AUTHOR/START queued Nov 8 06:50:31.804: TAC+: (2414739179) AUTHOR/START processed Nov 8 06:50:31.804: TAC+: (2414739179): received author response status = PASS_ADD Nov 8 06:50:31.804: TAC+: Closing TCP/IP 0x622C6CB8 connection to 10.200.20.133/49 Nov 8 06:50:31.804: Vi1 AAA/AUTHOR (2414739179): Post authorization status = PASS_ADD Nov 8 06:50:31.804: Vi1 AAA/AUTHOR/IPCP: Processing AV service=ppp Nov 8 06:50:31.804: Vi1 AAA/AUTHOR/IPCP: Processing AV protocol=ip Nov 8 06:50:31.804: Vi1 AAA/AUTHOR/IPCP: Processing AV addr*10.10.10.1 Nov 8 06:50:31.804: Vi1 AAA/AUTHOR/IPCP: Authorization succeeded Nov 8 06:50:31.804: Vi1 AAA/AUTHOR/IPCP: Done. Her address 10.10.10.1, we want 10.10.10.1 Nov 8 06:50:31.804: Vi1 IPCP: O CONFREJ [ACKrcvd] id 2 len 22 Nov 8 06:50:31.804: Vi1 IPCP: PrimaryWINS 0.0.0.0 (0x820600000000) Nov 8 06:50:31.804: Vi1 IPCP: SecondaryDNS 0.0.0.0 (0x830600000000) Nov 8 06:50:31.804: Vi1 IPCP: SecondaryWINS 0.0.0.0 (0x840600000000) Nov 8 06:50:31.832: Vi1 IPCP: I CONFREQ [ACKrcvd] id 3 len 22 Nov 8 06:50:31.832: Vi1 IPCP: CompressType VJ 15 slots CompressSlotID (0x0206002D0F01) Nov 8 06:50:31.832: Vi1 IPCP: Address 10.10.10.1 (0x03060A0A0A01) Nov 8 06:50:31.832: Vi1 IPCP: PrimaryDNS 0.0.0.0 (0x810600000000) Nov 8 06:50:31.832: Vi1 AAA/AUTHOR/IPCP: Start. Her address 10.10.10.1, we want 10.10.10.1 Nov 8 06:50:31.832: Vi1 AAA/AUTHOR/IPCP: Processing AV service=ppp Nov 8 06:50:31.832: Vi1 AAA/AUTHOR/IPCP: Processing AV protocol=ip Nov 8 06:50:31.832: Vi1 AAA/AUTHOR/IPCP: Processing AV addr*10.10.10.1 Nov 8 06:50:31.832: Vi1 AAA/AUTHOR/IPCP: Authorization succeeded Nov 8 06:50:31.832: Vi1 AAA/AUTHOR/IPCP: Done. Her address 10.10.10.1, we want 10.10.10.1 Nov 8 06:50:31.832: Vi1 IPCP: O CONFNAK [ACKrcvd] id 3 len 10 Nov 8 06:50:31.832: Vi1 IPCP: PrimaryDNS 10.200.20.134 (0x81060AC81486) Nov 8 06:50:31.856: Vi1 IPCP: I CONFREQ [ACKrcvd] id 4 len 22 Nov 8 06:50:31.856: Vi1 IPCP: CompressType VJ 15 slots CompressSlotID (0x0206002D0F01) Nov 8 06:50:31.856: Vi1 IPCP: Address 10.10.10.1 (0x03060A0A0A01) Nov 8 06:50:31.856: Vi1 IPCP: PrimaryDNS 10.200.20.134 (0x81060AC81486) Nov 8 06:50:31.856: Vi1 AAA/AUTHOR/IPCP: Start. Her address 10.10.10.1, we want 10.10.10.1 Nov 8 06:50:31.856: Vi1 AAA/AUTHOR/IPCP: Processing AV service=ppp Nov 8 06:50:31.856: Vi1 AAA/AUTHOR/IPCP: Processing AV protocol=ip Nov 8 06:50:31.856: Vi1 AAA/AUTHOR/IPCP: Processing AV addr*10.10.10.1 Nov 8 06:50:31.856: Vi1 AAA/AUTHOR/IPCP: Authorization succeeded Nov 8 06:50:31.856: Vi1 AAA/AUTHOR/IPCP: Done. Her address 10.10.10.1, we want 10.10.10.1 Nov 8 06:50:31.856: Vi1 IPCP: O CONFACK [ACKrcvd] id 4 len 22 Nov 8 06:50:31.856: Vi1 IPCP: CompressType VJ 15 slots CompressSlotID (0x0206002D0F01) Nov 8 06:50:31.856: Vi1 IPCP: Address 10.10.10.1 (0x03060A0A0A01) Nov 8 06:50:31.856: Vi1 IPCP: PrimaryDNS 10.200.20.134 (0x81060AC81486) Nov 8 06:50:31.856: Vi1 IPCP: State is Open Nov 8 06:50:31.860: Vi1 IPCP: Install route to 10.10.10.1
Related Information
| Updated: Nov 15, 2007 | Document ID: 9348 |