NettableWalker
IS-IT--Management
I use the following AAA setup on all my routers etc with no problems. But on a couple of 837 DSL routers it refuses to PPP authenticate because of the AAA. if i remove the AAA it works instantly. What am i doing wrong? How can i get around this?
The PPP debug output is at the bottom.
Thanks in advance of your help.
aaa new-model
aaa authentication login default group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa authorization exec default group tacacs+ local
aaa authorization network default group tacacs+ if-authenticated local
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting network default start-stop group tacacs+
aaa accounting connection default start-stop group tacacs+
aaa session-id common
tacacs-server host *.*.*.*
tacacs-server directed-request
tacacs-server key 7 ********
interface Dialer1
bandwidth 4096
ip address negotiated
ip access-group 100 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip mtu 1300
ip nat outside
encapsulation ppp
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname *********
ppp chap password 7 *********
ppp ipcp dns request
ppp ipcp wins request
hold-queue 224 in
Jan 25 10:17:32: %DIALER-6-BIND: Interface Vi1 bound to profile Di1
Jan 25 10:17:32: Vi1 PPP: Using dialer call direction
Jan 25 10:17:32: Vi1 PPP: Treating connection as a callout
Jan 25 10:17:32: Vi1 PPP: Authorization required
Jan 25 10:17:32: Vi1 PPP: No remote authentication for call-out
MCP,CCA,CCNA,CCNP,Net+.
The PPP debug output is at the bottom.
Thanks in advance of your help.
aaa new-model
aaa authentication login default group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa authorization exec default group tacacs+ local
aaa authorization network default group tacacs+ if-authenticated local
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting network default start-stop group tacacs+
aaa accounting connection default start-stop group tacacs+
aaa session-id common
tacacs-server host *.*.*.*
tacacs-server directed-request
tacacs-server key 7 ********
interface Dialer1
bandwidth 4096
ip address negotiated
ip access-group 100 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip mtu 1300
ip nat outside
encapsulation ppp
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname *********
ppp chap password 7 *********
ppp ipcp dns request
ppp ipcp wins request
hold-queue 224 in
Jan 25 10:17:32: %DIALER-6-BIND: Interface Vi1 bound to profile Di1
Jan 25 10:17:32: Vi1 PPP: Using dialer call direction
Jan 25 10:17:32: Vi1 PPP: Treating connection as a callout
Jan 25 10:17:32: Vi1 PPP: Authorization required
Jan 25 10:17:32: Vi1 PPP: No remote authentication for call-out
MCP,CCA,CCNA,CCNP,Net+.