Chapter 11: AI2524 Sync PPP Configuration Steps

Gateway 1

vpdn incoming nas1 gateway virtual-template 1 vpdn incoming nas2 gateway virtual-template 2

interface virtual-template 1 ip unnumbered Ethernet0

peer default ip address pool domain1-pool ppp authentication chap

interface virtual-template 2 ip unnumbered Ethernet0

peer default ip address pool domain2-pool ppp authentication chap

Example: Using TACACS+ for Forwarding from the NAS

This example provides configurations for an NAS and a public domain TACACS+ server. On the NAS it is only necessary to enable AAA and to use the vpdn enable command.

Users with structured logins (user@domain.com) will have their do- main authorized on the TACACS server and will be forwarded if there is a VPDN entry there. If there is no VPDN entry on the TACACS server, the login process will continue as normal.

NAS

aaanew-model

vpdn enable

TACACS+ Server

vpdn outgoing domain.com nas ip 172.21.9.18

August 1997

Page 11-31

2524UM

 

Page 257
Image 257
AIS AI2524 user manual Gateway, Example Using TACACS+ for Forwarding from the NAS, TACACS+ Server