WinXP PPP on 3600 AUX/MODEM

[sharkyj72]

Ok this has me a little stumped ;-)

Has anyone successfully configured a Cisco router to enable Remote LAN Access via Windows PPP using a modem connected to the AUX port?

My scenario is this. I am testing Cisco ACS for Windows using a variety of access methods (LAN, dial, wifi etc). Currently I'm testing dial configs ie road warrior type scenarios where a remote laptop user dials into the router and gets authenticated via tacacs+.

I have a Cisco 3640 in the lab that does not have any async interfaces. Therefore I'm using a USR modem attached to the AUX port.

I can successfully dial into the router using hyperterminal to manage the router remotely but am struggling with the Windows PPP bit.

According to Cisco, it is possible to use the AUX port for routing operations and I have configured the following,

1. correct modem settings (max baud 38400) on aux port.
2. a logical async interface on line 129 (default for aux on 3640) with ppp encapsulation / authentication.
3. On WinXP laptop have setup a RAS dial configuration.

When I kick off the RAS session, it dials the router then hangs when authenticating username and password. Eventually it times out. A debug PPP authentication on the router fails to produce any debug messages.

Please only post a reply if you've done this and have a sample config. I have read all the Cisco doc's and I'm not convinced the AUX port can be used in this way.

 

[irasman]

Your problem proabably is due to windows authentication settings.
got to the adapters
Security tab: Configure handshake and authentication methods. Networking select the type of tunel dont allow for auto.
Those are the primaries if that doesn't work let me know.

 

[sharkyj72]

Thanks irasman but it was a problem with autobaud in the IOS. I forced it to use 38400 and now it works fine

I now have full WinXP Dial up Networking via PPP to a Cisco 3640 with a modem attached to the AUX port. It even works with full tacacs+ authentication, authorisation and accounting.

I will post a sample config on monday for those who are interested.

 

[sharkyj72]

Config as promised.

Note: This uses TACACS+ running on Cisco ACS v3.1 for Win to authenticate users and authorise services. I configured an IP pool on the TACACS+ server. You could use a local pool instead which would be simpler.

nas1#sh run
Building configuration...

Current configuration : 2805 bytes
!
version 12.1
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname nas1
!
logging buffered 4096 debugging
aaa new-model
aaa authentication login xxxxx group tacacs+ local
aaa authentication ppp xxxxx group tacacs+ local
aaa authorization config-commands
aaa authorization exec xxxxx group tacacs+ local
aaa authorization commands 1 xxxxx group tacacs+ local
aaa authorization network xxxxx group tacacs+ local
aaa accounting update periodic 5
aaa accounting exec xxxxx start-stop group tacacs+
aaa accounting commands 1 xxxxx start-stop group tacacs+
aaa accounting network xxxxx start-stop group tacacs+
enable password 7 095C4F1A0A1218000F
!
username xxxxx privilege 15 password 7 130446001B5C163E6B73
username xxxxx privilege 15 password 7 030E540308
!
interface Loopback0
ip address 192.168.0.1 255.255.255.0
!
interface FastEthernet2/0
ip address 10.10.10.253 255.0.0.0
speed 100
full-duplex
!
interface Async129
ip unnumbered FastEthernet2/0
encapsulation ppp
ip tcp header-compression passive
no ip mroute-cache
async mode interactive
no peer default ip address
no fair-queue
no cdp enable
ppp authentication ms-chap chap xxxxx
ppp authorization xxxxx
ppp accounting xxxxx
!
ip classless
no ip http server
!
tacacs-server host x.x.x.x
tacacs-server key xxxxxx
!
line con 0
authorization commands 1 xxxxx
authorization exec xxxxx
login authentication xxxxx
line aux 0
exec-timeout 0 0
authorization commands 1 xxxxx
authorization exec xxxxx
login authentication xxxxx
modem InOut
modem autoconfigure type default
transport input all
transport output none
autoselect during-login
autoselect ppp
stopbits 1
speed 38400
flowcontrol hardware
line vty 0 4
authorization commands 1 xxxxx
authorization exec xxxxx
login authentication xxxxx
!
end