Cisco Systems DNC-305 manual Radius Remote Security Examples, DNC-328

Telco and ISP Dial Scenarios and Configurations

Large-Scale POPs

interface Ethernet2/2 no ip address shutdown

!

interface Ethernet2/3 no ip address shutdown

!

interface Virtual-Template1 ip unnumbered Loopback0 no ip mroute-cache

peer default ip address pool dialin_pool

pppauthentication chap pap dialin ppp multilink

!

router eigrp 10 network 10.0.0.0

passive-interface Virtual-Template1 no auto-summary

!

ip local pool dialin_pool 10.1.2.193 10.1.2.242 ip default-gateway 10.1.1.1

ip classless

!

radius-server host 10.1.1.23 auth-port 1645 acct-port 1646 radius-server host 10.1.1.24 auth-port 1645 acct-port 1646 radius-server key cisco

!

line con 0

login authentication console line aux 0

login authentication console line vty 0 4

login authentication vty

!

end

RADIUS Remote Security Examples

The RADIUS examples in the following sections use the Internet Engineering Task Force (IETF) syntax for the attributes:

•User Setup for PPP

•User Setup for PPP and Static IP Address

•Enabling Router Dial-In

•User Setup for SLIP

•User Setup for SLIP and Static IP Address

•Telnetting to a UNIX Host

•Automatic Rlogin to UNIX Host

Depending on how the dictionary is set up, the syntax for these configurations might differ between versions of RADIUS daemons.

Note You must have the async dynamic address command enabled on the network access server if you use Framed-IP-Address to statically assign IP addresses.

Cisco IOS Dial Services Configuration Guide: Network Services

DNC-328