Mailing List Archive: dnis vpdn & tacacs config

dnis vpdn & tacacs config

Jul 7, 2005, 7:56 AM

Post #1 of 4 (3616 views)

When i have vpdn based on domain (=domain.gr), i'm using the following config on my tacacs server:

user = domain.gr {
service = ppp protocol = vpdn {
tunnel-type = l2tp
tunnel-id = F_DOMAIN
vpdn-group = F_DOMAIN
l2tp-tunnel-authen=no
ip-addresses = "x.x.x.x/y.y.y.y"
}
}

If i want to have vpdn based on dnis (=333333333), will the following work?

user = 333333333 {
service = ppp protocol = vpdn {
tunnel-type = l2tp
tunnel-id = F_DOMAIN
vpdn-group = F_DOMAIN
l2tp-tunnel-authen=no
ip-addresses = "x.x.x.x/y.y.y.y"
}
}

RE: dnis vpdn & tacacs config [ In reply to ]

oboehmer at cisco

Jul 7, 2005, 7:59 AM

Post #2 of 4 (3496 views)

Permalink

Tassos,

with dnis, we authorize the username "dnis:333333333" (to use your
example). The rest is ok, the profile is identical to the domain tunnel
profile except for the username..

oli

Tassos Chatzithomaoglou <> wrote on Thursday, July 07, 2005 4:56 PM:

> When i have vpdn based on domain (=domain.gr), i'm using the
> following config on my tacacs server:
>
> user = domain.gr {
> service = ppp protocol = vpdn {
> tunnel-type = l2tp
> tunnel-id = F_DOMAIN
> vpdn-group = F_DOMAIN
> l2tp-tunnel-authen=no
> ip-addresses = "x.x.x.x/y.y.y.y"
> }
> }
>
>
> If i want to have vpdn based on dnis (=333333333), will the following
> work?
>
> user = 333333333 {
> service = ppp protocol = vpdn {
> tunnel-type = l2tp
> tunnel-id = F_DOMAIN
> vpdn-group = F_DOMAIN
> l2tp-tunnel-authen=no
> ip-addresses = "x.x.x.x/y.y.y.y"
> }
> }
>
>
> _______________________________________________
> cisco-nas mailing list
> cisco-nas@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nas

Re: dnis vpdn & tacacs config [ In reply to ]

achatz at forthnet

Jul 7, 2005, 8:11 AM

Post #3 of 4 (3485 views)

Permalink

Hi Oliver,

Does this mean i have to use the following in my case?

user = dnis:333333333 {
...
}

Oliver Boehmer (oboehmer) wrote on 7/7/2005 17:59:

> Tassos,
>
> with dnis, we authorize the username "dnis:333333333" (to use your
> example). The rest is ok, the profile is identical to the domain tunnel
> profile except for the username..
>
> oli
>
> Tassos Chatzithomaoglou <> wrote on Thursday, July 07, 2005 4:56 PM:
>
>
>>When i have vpdn based on domain (=domain.gr), i'm using the
>>following config on my tacacs server:
>>
>>user = domain.gr {
>> service = ppp protocol = vpdn {
>> tunnel-type = l2tp
>> tunnel-id = F_DOMAIN
>> vpdn-group = F_DOMAIN
>> l2tp-tunnel-authen=no
>> ip-addresses = "x.x.x.x/y.y.y.y"
>> }
>>}
>>
>>
>>If i want to have vpdn based on dnis (=333333333), will the following
>>work?
>>
>>user = 333333333 {
>> service = ppp protocol = vpdn {
>> tunnel-type = l2tp
>> tunnel-id = F_DOMAIN
>> vpdn-group = F_DOMAIN
>> l2tp-tunnel-authen=no
>> ip-addresses = "x.x.x.x/y.y.y.y"
>> }
>>}
>>
>>
>>_______________________________________________
>>cisco-nas mailing list
>>cisco-nas@puck.nether.net
>>https://puck.nether.net/mailman/listinfo/cisco-nas
>
>

--
***************************************
Tassos Chatzithomaoglou
Network Design & Development Department
FORTHnet S.A.
<achatz@forthnet.gr>
***************************************

Re: dnis vpdn & tacacs config [ In reply to ]

jc at isnet

Jul 8, 2005, 1:12 AM

Post #4 of 4 (3481 views)

Permalink

hi tassos,

On Thu, 7 Jul 2005, Tassos Chatzithomaoglou wrote:

> Does this mean i have to use the following in my case?
>
> user = dnis:333333333 {

yup that would be it...

i also do dnis based auth for vpdn but just with radius (cistron for now)

dnis:1234567 Password="something"
Service-Type = Outbound-User,
Cisco-AVPair = "vpdn:ip-addresses=x.x.x.x",
Cisco-AVPair = "vpdn:tunnel-id=xxxtun",
Cisco-AVPair = "vpdn:tunnel-type=l2tp",
Cisco-AVPair = "vpdn:l2tp-tunnel-password=xxxxXxxx"

http://www.cisco.com/en/US/tech/tk801/tk703/technologies_configuration_example09186a008009485d.shtml

hth

j.