Mailing List Archive

Problem with PPPOE dialin + aaa new-model
Hello list,

I have got a problem with a Cisco 871, IOS 12.4(2)T1.

With "no aaa new-model" my PPPOE-connection comes up and is running. But
when I enter "aaa new-model" it doesn't work.

I want to use the "aaa username..." to define VPN-users via EasyVPN server.
I am using CHAP for authentication of my DSL connection.


this is the only aaa configuration so far:

aaa new-model
aaa authentication login CONSOLE none
aaa session-id common


and that is my dialer0 configuration:

interface Dialer0
description DSL-Dialer Interface
ip address negotiated
ip access-group 101 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip inspect DEFAULT100 out
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip route-cache flow
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname ***#netuse@interdsl-6.de
ppp chap password PASS
!


with "aaa"-config
debug ppp negotiation:

000101: *Mar 1 06:12:16.643 PCTime: %DIALER-6-BIND: Interface Vi1 bound
to profile Di0
000102: *Mar 1 06:12:16.643 PCTime: Vi1 PPP: Phase is DOWN, Setup
000103: *Mar 1 06:12:16.643 PCTime: Vi1 PPP: Using dialer call direction
000104: *Mar 1 06:12:16.643 PCTime: Vi1 PPP: Treating connection as a
callout
000105: *Mar 1 06:12:16.643 PCTime: Vi1 PPP: Session handle[7F000038]
Session id[0]
000106: *Mar 1 06:12:16.643 PCTime: Vi1 PPP: Phase is ESTABLISHING,
Active Open
000107: *Mar 1 06:12:16.643 PCTime: Vi1 PPP: No remote authentication
for call-out
000108: *Mar 1 06:12:16.643 PCTime: Vi1 LCP: O CONFREQ [Closed] id 1 len 10
000109: *Mar 1 06:12:16.643 PCTime: Vi1 LCP: MagicNumber 0x1568EAB4
(0x05061568EAB4)
000110: *Mar 1 06:12:16.647 PCTime: %LINK-3-UPDOWN: Interface
Virtual-Access1, changed state to up
000111: *Mar 1 06:12:16.775 PCTime: Vi1 LCP: I CONFREQ [REQsent] id 98
len 18
000112: *Mar 1 06:12:16.775 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
000113: *Mar 1 06:12:16.775 PCTime: Vi1 LCP: AuthProto PAP (0x0304C023)
000114: *Mar 1 06:12:16.775 PCTime: Vi1 LCP: MagicNumber 0x456C1CDB
(0x0506456C1CDB)
000115: *Mar 1 06:12:16.775 PCTime: Vi1 LCP: O CONFNAK [REQsent] id 98
len 8
000116: *Mar 1 06:12:16.775 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
000117: *Mar 1 06:12:16.775 PCTime: Vi1 LCP: I CONFACK [REQsent] id 1
len 10
000118: *Mar 1 06:12:16.775 PCTime: Vi1 LCP: MagicNumber 0x1568EAB4
(0x05061568EAB4)
000119: *Mar 1 06:12:16.815 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 99
len 18
000120: *Mar 1 06:12:16.815 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
000121: *Mar 1 06:12:16.815 PCTime: Vi1 LCP: AuthProto PAP (0x0304C023)
000122: *Mar 1 06:12:16.815 PCTime: Vi1 LCP: MagicNumber 0x456C1CDB
(0x0506456C1CDB)
000123: *Mar 1 06:12:16.815 PCTime: Vi1 LCP: O CONFNAK [ACKrcvd] id 99
len 8
000124: *Mar 1 06:12:16.819 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
000125: *Mar 1 06:12:16.855 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 100
len 18
000126: *Mar 1 06:12:16.855 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
000127: *Mar 1 06:12:16.855 PCTime: Vi1 LCP: AuthProto PAP (0x0304C023)
000128: *Mar 1 06:12:16.855 PCTime: Vi1 LCP: MagicNumber 0x456C1CDB
(0x0506456C1CDB)
000129: *Mar 1 06:12:16.855 PCTime: Vi1 LCP: O CONFNAK [ACKrcvd] id 100
len 8
000130: *Mar 1 06:12:16.855 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
000131: *Mar 1 06:12:16.895 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 101
len 18
000132: *Mar 1 06:12:16.895 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
000133: *Mar 1 06:12:16.895 PCTime: Vi1 LCP: AuthProto PAP (0x0304C023)
000134: *Mar 1 06:12:16.895 PCTime: Vi1 LCP: MagicNumber 0x456C1CDB
(0x0506456C1CDB)
000135: *Mar 1 06:12:16.899 PCTime: Vi1 LCP: O CONFNAK [ACKrcvd] id 101
len 8
000136: *Mar 1 06:12:16.899 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
000137: *Mar 1 06:12:16.939 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 102
len 18
000138: *Mar 1 06:12:16.939 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
000139: *Mar 1 06:12:16.939 PCTime: Vi1 LCP: AuthProto PAP (0x0304C023)
000140: *Mar 1 06:12:16.939 PCTime: Vi1 LCP: MagicNumber 0x456C1CDB
(0x0506456C1CDB)
000141: *Mar 1 06:12:16.939 PCTime: Vi1 LCP: O CONFNAK [ACKrcvd] id 102
len 8
000142: *Mar 1 06:12:16.939 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
000143: *Mar 1 06:12:16.979 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 103
len 18
000144: *Mar 1 06:12:16.979 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
000145: *Mar 1 06:12:16.979 PCTime: Vi1 LCP: AuthProto PAP (0x0304C023)
000146: *Mar 1 06:12:16.979 PCTime: Vi1 LCP: MagicNumber 0x456C1CDB
(0x0506456C1CDB)
000147: *Mar 1 06:12:16.979 PCTime: Vi1 LCP: O CONFREJ [ACKrcvd] id 103
len 8
000148: *Mar 1 06:12:16.979 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
000149: *Mar 1 06:12:17.019 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 104
len 14
000150: *Mar 1 06:12:17.019 PCTime: Vi1 LCP: AuthProto PAP (0x0304C023)
000151: *Mar 1 06:12:17.019 PCTime: Vi1 LCP: MagicNumber 0x456C1CDB
(0x0506456C1CDB)
000152: *Mar 1 06:12:17.019 PCTime: Vi1 LCP: O CONFACK [ACKrcvd] id 104
len 14
000153: *Mar 1 06:12:17.019 PCTime: Vi1 LCP: AuthProto PAP (0x0304C023)
000154: *Mar 1 06:12:17.019 PCTime: Vi1 LCP: MagicNumber 0x456C1CDB
(0x0506456C1CDB)
000155: *Mar 1 06:12:17.019 PCTime: Vi1 LCP: State is Open
000156: *Mar 1 06:12:17.019 PCTime: Vi1 PPP: Phase is AUTHENTICATING,
by the peer
000157: *Mar 1 06:12:17.023 PCTime: Vi1 PPP: Sending Acct Event[Down]
id[14]
000158: *Mar 1 06:12:17.023 PCTime: Vi1 PPP: Phase is TERMINATING
000159: *Mar 1 06:12:17.023 PCTime: Vi1 LCP: O TERMREQ [Open] id 2 len 4
000160: *Mar 1 06:12:17.063 PCTime: Vi1 LCP: I TERMACK [TERMsent] id 2
len 4
000161: *Mar 1 06:12:17.063 PCTime: Vi1 LCP: State is Closed
000162: *Mar 1 06:12:17.063 PCTime: Vi1 PPP: Phase is DOWN
000163: *Mar 1 06:12:17.063 PCTime: %DIALER-6-UNBIND: Interface Vi1
unbound from profile Di0
000164: *Mar 1 06:12:17.067 PCTime: %LINK-3-UPDOWN: Interface
Virtual-Access1, changed state to down


without "aaa"-config
debug ppp negotiation:

000178: *Mar 1 06:13:48.055 PCTime: %DIALER-6-BIND: Interface Vi1 bound
to profile Di0
000179: *Mar 1 06:13:48.055 PCTime: Vi1 PPP: Phase is DOWN, Setup
000180: *Mar 1 06:13:48.055 PCTime: Vi1 PPP: Using dialer call direction
000181: *Mar 1 06:13:48.055 PCTime: Vi1 PPP: Treating connection as a
callout
000182: *Mar 1 06:13:48.059 PCTime: Vi1 PPP: Session handle[D8000044]
Session id[0]
000183: *Mar 1 06:13:48.059 PCTime: Vi1 PPP: Phase is ESTABLISHING,
Active Open
000184: *Mar 1 06:13:48.059 PCTime: Vi1 PPP: No remote authentication
for call-out
000185: *Mar 1 06:13:48.059 PCTime: Vi1 LCP: O CONFREQ [Closed] id 1 len 10
000186: *Mar 1 06:13:48.059 PCTime: Vi1 LCP: MagicNumber 0x156A4FD0
(0x0506156A4FD0)
000187: *Mar 1 06:13:48.059 PCTime: %LINK-3-UPDOWN: Interface
Virtual-Access1, changed state to up
000188: *Mar 1 06:13:48.243 PCTime: Vi1 LCP: I CONFREQ [REQsent] id 76
len 18
000189: *Mar 1 06:13:48.243 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
000190: *Mar 1 06:13:48.243 PCTime: Vi1 LCP: AuthProto PAP (0x0304C023)
000191: *Mar 1 06:13:48.247 PCTime: Vi1 LCP: MagicNumber 0x6D0EDC69
(0x05066D0EDC69)
000192: *Mar 1 06:13:48.247 PCTime: Vi1 LCP: O CONFNAK [REQsent] id 76
len 13
000193: *Mar 1 06:13:48.247 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
000194: *Mar 1 06:13:48.247 PCTime: Vi1 LCP: AuthProto CHAP
(0x0305C22305)
000195: *Mar 1 06:13:48.247 PCTime: Vi1 LCP: I CONFACK [REQsent] id 1
len 10
000196: *Mar 1 06:13:48.247 PCTime: Vi1 LCP: MagicNumber 0x156A4FD0
(0x0506156A4FD0)
000197: *Mar 1 06:13:48.291 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 77
len 19
000198: *Mar 1 06:13:48.291 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
000199: *Mar 1 06:13:48.291 PCTime: Vi1 LCP: AuthProto CHAP
(0x0305C22305)
000200: *Mar 1 06:13:48.291 PCTime: Vi1 LCP: MagicNumber 0x6D0EDC69
(0x05066D0EDC69)
000201: *Mar 1 06:13:48.291 PCTime: Vi1 LCP: O CONFNAK [ACKrcvd] id 77
len 8
000202: *Mar 1 06:13:48.291 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
000203: *Mar 1 06:13:48.331 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 78
len 19
000204: *Mar 1 06:13:48.331 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
000205: *Mar 1 06:13:48.331 PCTime: Vi1 LCP: AuthProto CHAP
(0x0305C22305)
000206: *Mar 1 06:13:48.331 PCTime: Vi1 LCP: MagicNumber 0x6D0EDC69
(0x05066D0EDC69)
000207: *Mar 1 06:13:48.335 PCTime: Vi1 LCP: O CONFNAK [ACKrcvd] id 78
len 8
000208: *Mar 1 06:13:48.335 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
000209: *Mar 1 06:13:48.383 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 79
len 19
000210: *Mar 1 06:13:48.383 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
000211: *Mar 1 06:13:48.383 PCTime: Vi1 LCP: AuthProto CHAP
(0x0305C22305)
000212: *Mar 1 06:13:48.383 PCTime: Vi1 LCP: MagicNumber 0x6D0EDC69
(0x05066D0EDC69)
000213: *Mar 1 06:13:48.383 PCTime: Vi1 LCP: O CONFNAK [ACKrcvd] id 79
len 8
000214: *Mar 1 06:13:48.383 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
000215: *Mar 1 06:13:48.427 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 80
len 19
000216: *Mar 1 06:13:48.427 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
000217: *Mar 1 06:13:48.427 PCTime: Vi1 LCP: AuthProto CHAP
(0x0305C22305)
000218: *Mar 1 06:13:48.431 PCTime: Vi1 LCP: MagicNumber 0x6D0EDC69
(0x05066D0EDC69)
000219: *Mar 1 06:13:48.431 PCTime: Vi1 LCP: O CONFNAK [ACKrcvd] id 80
len 8
000220: *Mar 1 06:13:48.431 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
000221: *Mar 1 06:13:48.471 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 81
len 19
000222: *Mar 1 06:13:48.471 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
000223: *Mar 1 06:13:48.471 PCTime: Vi1 LCP: AuthProto CHAP
(0x0305C22305)
000224: *Mar 1 06:13:48.471 PCTime: Vi1 LCP: MagicNumber 0x6D0EDC69
(0x05066D0EDC69)
000225: *Mar 1 06:13:48.471 PCTime: Vi1 LCP: O CONFREJ [ACKrcvd] id 81
len 8
000226: *Mar 1 06:13:48.471 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
000227: *Mar 1 06:13:48.511 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 82
len 15
000228: *Mar 1 06:13:48.511 PCTime: Vi1 LCP: AuthProto CHAP
(0x0305C22305)
000229: *Mar 1 06:13:48.511 PCTime: Vi1 LCP: MagicNumber 0x6D0EDC69
(0x05066D0EDC69)
000230: *Mar 1 06:13:48.511 PCTime: Vi1 LCP: O CONFACK [ACKrcvd] id 82
len 15
000231: *Mar 1 06:13:48.515 PCTime: Vi1 LCP: AuthProto CHAP
(0x0305C22305)
000232: *Mar 1 06:13:48.515 PCTime: Vi1 LCP: MagicNumber 0x6D0EDC69
(0x05066D0EDC69)
000233: *Mar 1 06:13:48.515 PCTime: Vi1 LCP: State is Open
000234: *Mar 1 06:13:48.515 PCTime: Vi1 PPP: Phase is AUTHENTICATING,
by the peer
000235: *Mar 1 06:13:48.563 PCTime: Vi1 CHAP: I CHALLENGE id 117 len 41
from "KIEX42-erx"
000236: *Mar 1 06:13:48.563 PCTime: Vi1 CHAP: Using hostname from
interface CHAP
000237: *Mar 1 06:13:48.567 PCTime: Vi1 CHAP: Using password from
interface CHAP
000238: *Mar 1 06:13:48.567 PCTime: Vi1 CHAP: O RESPONSE id 117 len 50
from "adsltest#netuse@interdsl-6.de"
000239: *Mar 1 06:13:49.103 PCTime: Vi1 LCP: I CONFREQ [Open] id 1 len 19
000240: *Mar 1 06:13:49.103 PCTime: Vi1 LCP: MRU 1452 (0x010405AC)
000241: *Mar 1 06:13:49.103 PCTime: Vi1 LCP: AuthProto CHAP
(0x0305C22305)
000242: *Mar 1 06:13:49.103 PCTime: Vi1 LCP: MagicNumber 0x602CBD8E
(0x0506602CBD8E)
000243: *Mar 1 06:13:49.103 PCTime: Vi1 PPP: Phase is TERMINATING
000244: *Mar 1 06:13:49.103 PCTime: Vi1 PPP: No remote authentication
for call-out
000245: *Mar 1 06:13:49.103 PCTime: Vi1 PPP: Phase is ESTABLISHING
000246: *Mar 1 06:13:49.103 PCTime: Vi1 LCP: O CONFREQ [Open] id 2 len 10
000247: *Mar 1 06:13:49.103 PCTime: Vi1 LCP: MagicNumber 0x156A53E5
(0x0506156A53E5)
000248: *Mar 1 06:13:49.103 PCTime: Vi1 LCP: O CONFNAK [Open] id 1 len 8
000249: *Mar 1 06:13:49.103 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
000250: *Mar 1 06:13:49.151 PCTime: Vi1 LCP: I CONFACK [REQsent] id 2
len 10
000251: *Mar 1 06:13:49.151 PCTime: Vi1 LCP: MagicNumber 0x156A53E5
(0x0506156A53E5)
000252: *Mar 1 06:13:49.155 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 2
len 19
000253: *Mar 1 06:13:49.155 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
000254: *Mar 1 06:13:49.155 PCTime: Vi1 LCP: AuthProto CHAP
(0x0305C22305)
000255: *Mar 1 06:13:49.155 PCTime: Vi1 LCP: MagicNumber 0x602CBD8E
(0x0506602CBD8E)
000256: *Mar 1 06:13:49.155 PCTime: Vi1 LCP: O CONFACK [ACKrcvd] id 2
len 19
000257: *Mar 1 06:13:49.155 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
000258: *Mar 1 06:13:49.155 PCTime: Vi1 LCP: AuthProto CHAP
(0x0305C22305)
000259: *Mar 1 06:13:49.155 PCTime: Vi1 LCP: MagicNumber 0x602CBD8E
(0x0506602CBD8E)
000260: *Mar 1 06:13:49.159 PCTime: Vi1 LCP: State is Open
000261: *Mar 1 06:13:49.159 PCTime: Vi1 PPP: Phase is AUTHENTICATING,
by the peer
000262: *Mar 1 06:13:49.203 PCTime: Vi1 CHAP: I CHALLENGE id 118 len 31
from "netuse-dsl"
000263: *Mar 1 06:13:49.203 PCTime: Vi1 CHAP: Using hostname from
interface CHAP
000264: *Mar 1 06:13:49.207 PCTime: Vi1 CHAP: Using password from
interface CHAP
000265: *Mar 1 06:13:49.207 PCTime: Vi1 CHAP: O RESPONSE id 118 len 50
from "***#netuse@interdsl-6.de"
000266: *Mar 1 06:13:49.319 PCTime: Vi1 CHAP: I SUCCESS id 118 len 4
000267: *Mar 1 06:13:49.319 PCTime: Vi1 PPP: Phase is FORWARDING,
Attempting Forward
000268: *Mar 1 06:13:49.319 PCTime: Vi1 PPP: Queue IPCP code[1] id[1]
000269: *Mar 1 06:13:49.319 PCTime: Vi1 PPP: Phase is ESTABLISHING,
Finish LCP
000270: *Mar 1 06:13:49.319 PCTime: Vi1 PPP: Phase is UP
000271: *Mar 1 06:13:49.319 PCTime: Vi1 IPCP: O CONFREQ [Closed] id 1
len 10
000272: *Mar 1 06:13:49.323 PCTime: Vi1 IPCP: Address 0.0.0.0
(0x030600000000)
000273: *Mar 1 06:13:49.323 PCTime: Vi1 PPP: Process pending ncp packets
000274: *Mar 1 06:13:49.323 PCTime: Vi1 IPCP: Redirect packet to Vi1
000275: *Mar 1 06:13:49.323 PCTime: Vi1 IPCP: I CONFREQ [REQsent] id 1
len 10
000276: *Mar 1 06:13:49.323 PCTime: Vi1 IPCP: Address 195.244.255.50
(0x0306C3F4FF32)
000277: *Mar 1 06:13:49.323 PCTime: Vi1 IPCP: O CONFACK [REQsent] id 1
len 10
000278: *Mar 1 06:13:49.323 PCTime: Vi1 IPCP: Address 195.244.255.50
(0x0306C3F4FF32)
000279: *Mar 1 06:13:49.367 PCTime: Vi1 IPCP: I CONFNAK [ACKsent] id 1
len 10
000280: *Mar 1 06:13:49.367 PCTime: Vi1 IPCP: Address 195.244.254.34
(0x0306C3F4FE22)
000281: *Mar 1 06:13:49.367 PCTime: Vi1 IPCP: O CONFREQ [ACKsent] id 2
len 10
000282: *Mar 1 06:13:49.367 PCTime: Vi1 IPCP: Address 195.244.254.34
(0x0306C3F4FE22)
000283: *Mar 1 06:13:49.415 PCTime: Vi1 IPCP: I CONFACK [ACKsent] id 2
len 10
000284: *Mar 1 06:13:49.415 PCTime: Vi1 IPCP: Address 195.244.254.34
(0x0306C3F4FE22)
000285: *Mar 1 06:13:49.415 PCTime: Vi1 IPCP: State is Open
000286: *Mar 1 06:13:49.415 PCTime: Di0 IPCP: Install negotiated IP
interface address 195.244.254.34
000287: *Mar 1 06:13:49.419 PCTime: Di0 IPCP: Install route to
195.244.255.50
000288: *Mar 1 06:13:49.419 PCTime: Vi1 IPCP: Add link info for cef
entry 195.244.255.50
000289: *Mar 1 06:13:50.319 PCTime: %LINEPROTO-5-UPDOWN: Line protocol
on Interface Virtual-Access1, changed state to up





--
Joerg Schmuetz
NetUSE AG
Dr.-Hell-Strasse, D-24107 Kiel, Germany
Telefon: +49 431 2390 400 -- Telefax: +49 431 2390 499
_______________________________________________
cisco-nas mailing list
cisco-nas@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nas
Re: Problem with PPPOE dialin + aaa new-model [ In reply to ]
At 04:04 PM 11/15/2005 +0100, Joerg Schmuetz wrote:
>Hello list,
>
>I have got a problem with a Cisco 871, IOS 12.4(2)T1.
>
>With "no aaa new-model" my PPPOE-connection comes up and is running. But
>when I enter "aaa new-model" it doesn't work.
>
>I want to use the "aaa username..." to define VPN-users via EasyVPN server.
>I am using CHAP for authentication of my DSL connection.

Try adding <ppp pap refuse> to the dialer interface, when AAA is
enabled. Otherwise,
if you do want to be able to use PAP for authentication, you need to add
<ppp pap
sent-username foo password bar> to the dialer.

mark


>this is the only aaa configuration so far:
>
>aaa new-model
>aaa authentication login CONSOLE none
>aaa session-id common
>
>
>and that is my dialer0 configuration:
>
>interface Dialer0
> description DSL-Dialer Interface
> ip address negotiated
> ip access-group 101 in
> no ip redirects
> no ip unreachables
> no ip proxy-arp
> ip inspect DEFAULT100 out
> ip nat outside
> ip virtual-reassembly
> encapsulation ppp
> ip route-cache flow
> dialer pool 1
> dialer-group 1
> no cdp enable
> ppp authentication chap callin
> ppp chap hostname ***#netuse@interdsl-6.de
> ppp chap password PASS
>!
>
>
>with "aaa"-config
>debug ppp negotiation:
>
>000101: *Mar 1 06:12:16.643 PCTime: %DIALER-6-BIND: Interface Vi1 bound
>to profile Di0
>000102: *Mar 1 06:12:16.643 PCTime: Vi1 PPP: Phase is DOWN, Setup
>000103: *Mar 1 06:12:16.643 PCTime: Vi1 PPP: Using dialer call direction
>000104: *Mar 1 06:12:16.643 PCTime: Vi1 PPP: Treating connection as a
>callout
>000105: *Mar 1 06:12:16.643 PCTime: Vi1 PPP: Session handle[7F000038]
>Session id[0]
>000106: *Mar 1 06:12:16.643 PCTime: Vi1 PPP: Phase is ESTABLISHING,
>Active Open
>000107: *Mar 1 06:12:16.643 PCTime: Vi1 PPP: No remote authentication
>for call-out
>000108: *Mar 1 06:12:16.643 PCTime: Vi1 LCP: O CONFREQ [Closed] id 1 len 10
>000109: *Mar 1 06:12:16.643 PCTime: Vi1 LCP: MagicNumber 0x1568EAB4
>(0x05061568EAB4)
>000110: *Mar 1 06:12:16.647 PCTime: %LINK-3-UPDOWN: Interface
>Virtual-Access1, changed state to up
>000111: *Mar 1 06:12:16.775 PCTime: Vi1 LCP: I CONFREQ [REQsent] id 98
>len 18
>000112: *Mar 1 06:12:16.775 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
>000113: *Mar 1 06:12:16.775 PCTime: Vi1 LCP: AuthProto PAP (0x0304C023)
>000114: *Mar 1 06:12:16.775 PCTime: Vi1 LCP: MagicNumber 0x456C1CDB
>(0x0506456C1CDB)
>000115: *Mar 1 06:12:16.775 PCTime: Vi1 LCP: O CONFNAK [REQsent] id 98
>len 8
>000116: *Mar 1 06:12:16.775 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
>000117: *Mar 1 06:12:16.775 PCTime: Vi1 LCP: I CONFACK [REQsent] id 1
>len 10
>000118: *Mar 1 06:12:16.775 PCTime: Vi1 LCP: MagicNumber 0x1568EAB4
>(0x05061568EAB4)
>000119: *Mar 1 06:12:16.815 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 99
>len 18
>000120: *Mar 1 06:12:16.815 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
>000121: *Mar 1 06:12:16.815 PCTime: Vi1 LCP: AuthProto PAP (0x0304C023)
>000122: *Mar 1 06:12:16.815 PCTime: Vi1 LCP: MagicNumber 0x456C1CDB
>(0x0506456C1CDB)
>000123: *Mar 1 06:12:16.815 PCTime: Vi1 LCP: O CONFNAK [ACKrcvd] id 99
>len 8
>000124: *Mar 1 06:12:16.819 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
>000125: *Mar 1 06:12:16.855 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 100
>len 18
>000126: *Mar 1 06:12:16.855 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
>000127: *Mar 1 06:12:16.855 PCTime: Vi1 LCP: AuthProto PAP (0x0304C023)
>000128: *Mar 1 06:12:16.855 PCTime: Vi1 LCP: MagicNumber 0x456C1CDB
>(0x0506456C1CDB)
>000129: *Mar 1 06:12:16.855 PCTime: Vi1 LCP: O CONFNAK [ACKrcvd] id 100
>len 8
>000130: *Mar 1 06:12:16.855 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
>000131: *Mar 1 06:12:16.895 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 101
>len 18
>000132: *Mar 1 06:12:16.895 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
>000133: *Mar 1 06:12:16.895 PCTime: Vi1 LCP: AuthProto PAP (0x0304C023)
>000134: *Mar 1 06:12:16.895 PCTime: Vi1 LCP: MagicNumber 0x456C1CDB
>(0x0506456C1CDB)
>000135: *Mar 1 06:12:16.899 PCTime: Vi1 LCP: O CONFNAK [ACKrcvd] id 101
>len 8
>000136: *Mar 1 06:12:16.899 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
>000137: *Mar 1 06:12:16.939 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 102
>len 18
>000138: *Mar 1 06:12:16.939 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
>000139: *Mar 1 06:12:16.939 PCTime: Vi1 LCP: AuthProto PAP (0x0304C023)
>000140: *Mar 1 06:12:16.939 PCTime: Vi1 LCP: MagicNumber 0x456C1CDB
>(0x0506456C1CDB)
>000141: *Mar 1 06:12:16.939 PCTime: Vi1 LCP: O CONFNAK [ACKrcvd] id 102
>len 8
>000142: *Mar 1 06:12:16.939 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
>000143: *Mar 1 06:12:16.979 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 103
>len 18
>000144: *Mar 1 06:12:16.979 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
>000145: *Mar 1 06:12:16.979 PCTime: Vi1 LCP: AuthProto PAP (0x0304C023)
>000146: *Mar 1 06:12:16.979 PCTime: Vi1 LCP: MagicNumber 0x456C1CDB
>(0x0506456C1CDB)
>000147: *Mar 1 06:12:16.979 PCTime: Vi1 LCP: O CONFREJ [ACKrcvd] id 103
>len 8
>000148: *Mar 1 06:12:16.979 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
>000149: *Mar 1 06:12:17.019 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 104
>len 14
>000150: *Mar 1 06:12:17.019 PCTime: Vi1 LCP: AuthProto PAP (0x0304C023)
>000151: *Mar 1 06:12:17.019 PCTime: Vi1 LCP: MagicNumber 0x456C1CDB
>(0x0506456C1CDB)
>000152: *Mar 1 06:12:17.019 PCTime: Vi1 LCP: O CONFACK [ACKrcvd] id 104
>len 14
>000153: *Mar 1 06:12:17.019 PCTime: Vi1 LCP: AuthProto PAP (0x0304C023)
>000154: *Mar 1 06:12:17.019 PCTime: Vi1 LCP: MagicNumber 0x456C1CDB
>(0x0506456C1CDB)
>000155: *Mar 1 06:12:17.019 PCTime: Vi1 LCP: State is Open
>000156: *Mar 1 06:12:17.019 PCTime: Vi1 PPP: Phase is AUTHENTICATING,
>by the peer
>000157: *Mar 1 06:12:17.023 PCTime: Vi1 PPP: Sending Acct Event[Down]
>id[14]
>000158: *Mar 1 06:12:17.023 PCTime: Vi1 PPP: Phase is TERMINATING
>000159: *Mar 1 06:12:17.023 PCTime: Vi1 LCP: O TERMREQ [Open] id 2 len 4
>000160: *Mar 1 06:12:17.063 PCTime: Vi1 LCP: I TERMACK [TERMsent] id 2
>len 4
>000161: *Mar 1 06:12:17.063 PCTime: Vi1 LCP: State is Closed
>000162: *Mar 1 06:12:17.063 PCTime: Vi1 PPP: Phase is DOWN
>000163: *Mar 1 06:12:17.063 PCTime: %DIALER-6-UNBIND: Interface Vi1
>unbound from profile Di0
>000164: *Mar 1 06:12:17.067 PCTime: %LINK-3-UPDOWN: Interface
>Virtual-Access1, changed state to down
>
>
>without "aaa"-config
>debug ppp negotiation:
>
>000178: *Mar 1 06:13:48.055 PCTime: %DIALER-6-BIND: Interface Vi1 bound
>to profile Di0
>000179: *Mar 1 06:13:48.055 PCTime: Vi1 PPP: Phase is DOWN, Setup
>000180: *Mar 1 06:13:48.055 PCTime: Vi1 PPP: Using dialer call direction
>000181: *Mar 1 06:13:48.055 PCTime: Vi1 PPP: Treating connection as a
>callout
>000182: *Mar 1 06:13:48.059 PCTime: Vi1 PPP: Session handle[D8000044]
>Session id[0]
>000183: *Mar 1 06:13:48.059 PCTime: Vi1 PPP: Phase is ESTABLISHING,
>Active Open
>000184: *Mar 1 06:13:48.059 PCTime: Vi1 PPP: No remote authentication
>for call-out
>000185: *Mar 1 06:13:48.059 PCTime: Vi1 LCP: O CONFREQ [Closed] id 1 len 10
>000186: *Mar 1 06:13:48.059 PCTime: Vi1 LCP: MagicNumber 0x156A4FD0
>(0x0506156A4FD0)
>000187: *Mar 1 06:13:48.059 PCTime: %LINK-3-UPDOWN: Interface
>Virtual-Access1, changed state to up
>000188: *Mar 1 06:13:48.243 PCTime: Vi1 LCP: I CONFREQ [REQsent] id 76
>len 18
>000189: *Mar 1 06:13:48.243 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
>000190: *Mar 1 06:13:48.243 PCTime: Vi1 LCP: AuthProto PAP (0x0304C023)
>000191: *Mar 1 06:13:48.247 PCTime: Vi1 LCP: MagicNumber 0x6D0EDC69
>(0x05066D0EDC69)
>000192: *Mar 1 06:13:48.247 PCTime: Vi1 LCP: O CONFNAK [REQsent] id 76
>len 13
>000193: *Mar 1 06:13:48.247 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
>000194: *Mar 1 06:13:48.247 PCTime: Vi1 LCP: AuthProto CHAP
>(0x0305C22305)
>000195: *Mar 1 06:13:48.247 PCTime: Vi1 LCP: I CONFACK [REQsent] id 1
>len 10
>000196: *Mar 1 06:13:48.247 PCTime: Vi1 LCP: MagicNumber 0x156A4FD0
>(0x0506156A4FD0)
>000197: *Mar 1 06:13:48.291 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 77
>len 19
>000198: *Mar 1 06:13:48.291 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
>000199: *Mar 1 06:13:48.291 PCTime: Vi1 LCP: AuthProto CHAP
>(0x0305C22305)
>000200: *Mar 1 06:13:48.291 PCTime: Vi1 LCP: MagicNumber 0x6D0EDC69
>(0x05066D0EDC69)
>000201: *Mar 1 06:13:48.291 PCTime: Vi1 LCP: O CONFNAK [ACKrcvd] id 77
>len 8
>000202: *Mar 1 06:13:48.291 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
>000203: *Mar 1 06:13:48.331 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 78
>len 19
>000204: *Mar 1 06:13:48.331 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
>000205: *Mar 1 06:13:48.331 PCTime: Vi1 LCP: AuthProto CHAP
>(0x0305C22305)
>000206: *Mar 1 06:13:48.331 PCTime: Vi1 LCP: MagicNumber 0x6D0EDC69
>(0x05066D0EDC69)
>000207: *Mar 1 06:13:48.335 PCTime: Vi1 LCP: O CONFNAK [ACKrcvd] id 78
>len 8
>000208: *Mar 1 06:13:48.335 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
>000209: *Mar 1 06:13:48.383 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 79
>len 19
>000210: *Mar 1 06:13:48.383 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
>000211: *Mar 1 06:13:48.383 PCTime: Vi1 LCP: AuthProto CHAP
>(0x0305C22305)
>000212: *Mar 1 06:13:48.383 PCTime: Vi1 LCP: MagicNumber 0x6D0EDC69
>(0x05066D0EDC69)
>000213: *Mar 1 06:13:48.383 PCTime: Vi1 LCP: O CONFNAK [ACKrcvd] id 79
>len 8
>000214: *Mar 1 06:13:48.383 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
>000215: *Mar 1 06:13:48.427 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 80
>len 19
>000216: *Mar 1 06:13:48.427 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
>000217: *Mar 1 06:13:48.427 PCTime: Vi1 LCP: AuthProto CHAP
>(0x0305C22305)
>000218: *Mar 1 06:13:48.431 PCTime: Vi1 LCP: MagicNumber 0x6D0EDC69
>(0x05066D0EDC69)
>000219: *Mar 1 06:13:48.431 PCTime: Vi1 LCP: O CONFNAK [ACKrcvd] id 80
>len 8
>000220: *Mar 1 06:13:48.431 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
>000221: *Mar 1 06:13:48.471 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 81
>len 19
>000222: *Mar 1 06:13:48.471 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
>000223: *Mar 1 06:13:48.471 PCTime: Vi1 LCP: AuthProto CHAP
>(0x0305C22305)
>000224: *Mar 1 06:13:48.471 PCTime: Vi1 LCP: MagicNumber 0x6D0EDC69
>(0x05066D0EDC69)
>000225: *Mar 1 06:13:48.471 PCTime: Vi1 LCP: O CONFREJ [ACKrcvd] id 81
>len 8
>000226: *Mar 1 06:13:48.471 PCTime: Vi1 LCP: MRU 1492 (0x010405D4)
>000227: *Mar 1 06:13:48.511 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 82
>len 15
>000228: *Mar 1 06:13:48.511 PCTime: Vi1 LCP: AuthProto CHAP
>(0x0305C22305)
>000229: *Mar 1 06:13:48.511 PCTime: Vi1 LCP: MagicNumber 0x6D0EDC69
>(0x05066D0EDC69)
>000230: *Mar 1 06:13:48.511 PCTime: Vi1 LCP: O CONFACK [ACKrcvd] id 82
>len 15
>000231: *Mar 1 06:13:48.515 PCTime: Vi1 LCP: AuthProto CHAP
>(0x0305C22305)
>000232: *Mar 1 06:13:48.515 PCTime: Vi1 LCP: MagicNumber 0x6D0EDC69
>(0x05066D0EDC69)
>000233: *Mar 1 06:13:48.515 PCTime: Vi1 LCP: State is Open
>000234: *Mar 1 06:13:48.515 PCTime: Vi1 PPP: Phase is AUTHENTICATING,
>by the peer
>000235: *Mar 1 06:13:48.563 PCTime: Vi1 CHAP: I CHALLENGE id 117 len 41
>from "KIEX42-erx"
>000236: *Mar 1 06:13:48.563 PCTime: Vi1 CHAP: Using hostname from
>interface CHAP
>000237: *Mar 1 06:13:48.567 PCTime: Vi1 CHAP: Using password from
>interface CHAP
>000238: *Mar 1 06:13:48.567 PCTime: Vi1 CHAP: O RESPONSE id 117 len 50
>from "adsltest#netuse@interdsl-6.de"
>000239: *Mar 1 06:13:49.103 PCTime: Vi1 LCP: I CONFREQ [Open] id 1 len 19
>000240: *Mar 1 06:13:49.103 PCTime: Vi1 LCP: MRU 1452 (0x010405AC)
>000241: *Mar 1 06:13:49.103 PCTime: Vi1 LCP: AuthProto CHAP
>(0x0305C22305)
>000242: *Mar 1 06:13:49.103 PCTime: Vi1 LCP: MagicNumber 0x602CBD8E
>(0x0506602CBD8E)
>000243: *Mar 1 06:13:49.103 PCTime: Vi1 PPP: Phase is TERMINATING
>000244: *Mar 1 06:13:49.103 PCTime: Vi1 PPP: No remote authentication
>for call-out
>000245: *Mar 1 06:13:49.103 PCTime: Vi1 PPP: Phase is ESTABLISHING
>000246: *Mar 1 06:13:49.103 PCTime: Vi1 LCP: O CONFREQ [Open] id 2 len 10
>000247: *Mar 1 06:13:49.103 PCTime: Vi1 LCP: MagicNumber 0x156A53E5
>(0x0506156A53E5)
>000248: *Mar 1 06:13:49.103 PCTime: Vi1 LCP: O CONFNAK [Open] id 1 len 8
>000249: *Mar 1 06:13:49.103 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
>000250: *Mar 1 06:13:49.151 PCTime: Vi1 LCP: I CONFACK [REQsent] id 2
>len 10
>000251: *Mar 1 06:13:49.151 PCTime: Vi1 LCP: MagicNumber 0x156A53E5
>(0x0506156A53E5)
>000252: *Mar 1 06:13:49.155 PCTime: Vi1 LCP: I CONFREQ [ACKrcvd] id 2
>len 19
>000253: *Mar 1 06:13:49.155 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
>000254: *Mar 1 06:13:49.155 PCTime: Vi1 LCP: AuthProto CHAP
>(0x0305C22305)
>000255: *Mar 1 06:13:49.155 PCTime: Vi1 LCP: MagicNumber 0x602CBD8E
>(0x0506602CBD8E)
>000256: *Mar 1 06:13:49.155 PCTime: Vi1 LCP: O CONFACK [ACKrcvd] id 2
>len 19
>000257: *Mar 1 06:13:49.155 PCTime: Vi1 LCP: MRU 1500 (0x010405DC)
>000258: *Mar 1 06:13:49.155 PCTime: Vi1 LCP: AuthProto CHAP
>(0x0305C22305)
>000259: *Mar 1 06:13:49.155 PCTime: Vi1 LCP: MagicNumber 0x602CBD8E
>(0x0506602CBD8E)
>000260: *Mar 1 06:13:49.159 PCTime: Vi1 LCP: State is Open
>000261: *Mar 1 06:13:49.159 PCTime: Vi1 PPP: Phase is AUTHENTICATING,
>by the peer
>000262: *Mar 1 06:13:49.203 PCTime: Vi1 CHAP: I CHALLENGE id 118 len 31
>from "netuse-dsl"
>000263: *Mar 1 06:13:49.203 PCTime: Vi1 CHAP: Using hostname from
>interface CHAP
>000264: *Mar 1 06:13:49.207 PCTime: Vi1 CHAP: Using password from
>interface CHAP
>000265: *Mar 1 06:13:49.207 PCTime: Vi1 CHAP: O RESPONSE id 118 len 50
>from "***#netuse@interdsl-6.de"
>000266: *Mar 1 06:13:49.319 PCTime: Vi1 CHAP: I SUCCESS id 118 len 4
>000267: *Mar 1 06:13:49.319 PCTime: Vi1 PPP: Phase is FORWARDING,
>Attempting Forward
>000268: *Mar 1 06:13:49.319 PCTime: Vi1 PPP: Queue IPCP code[1] id[1]
>000269: *Mar 1 06:13:49.319 PCTime: Vi1 PPP: Phase is ESTABLISHING,
>Finish LCP
>000270: *Mar 1 06:13:49.319 PCTime: Vi1 PPP: Phase is UP
>000271: *Mar 1 06:13:49.319 PCTime: Vi1 IPCP: O CONFREQ [Closed] id 1
>len 10
>000272: *Mar 1 06:13:49.323 PCTime: Vi1 IPCP: Address 0.0.0.0
>(0x030600000000)
>000273: *Mar 1 06:13:49.323 PCTime: Vi1 PPP: Process pending ncp packets
>000274: *Mar 1 06:13:49.323 PCTime: Vi1 IPCP: Redirect packet to Vi1
>000275: *Mar 1 06:13:49.323 PCTime: Vi1 IPCP: I CONFREQ [REQsent] id 1
>len 10
>000276: *Mar 1 06:13:49.323 PCTime: Vi1 IPCP: Address 195.244.255.50
>(0x0306C3F4FF32)
>000277: *Mar 1 06:13:49.323 PCTime: Vi1 IPCP: O CONFACK [REQsent] id 1
>len 10
>000278: *Mar 1 06:13:49.323 PCTime: Vi1 IPCP: Address 195.244.255.50
>(0x0306C3F4FF32)
>000279: *Mar 1 06:13:49.367 PCTime: Vi1 IPCP: I CONFNAK [ACKsent] id 1
>len 10
>000280: *Mar 1 06:13:49.367 PCTime: Vi1 IPCP: Address 195.244.254.34
>(0x0306C3F4FE22)
>000281: *Mar 1 06:13:49.367 PCTime: Vi1 IPCP: O CONFREQ [ACKsent] id 2
>len 10
>000282: *Mar 1 06:13:49.367 PCTime: Vi1 IPCP: Address 195.244.254.34
>(0x0306C3F4FE22)
>000283: *Mar 1 06:13:49.415 PCTime: Vi1 IPCP: I CONFACK [ACKsent] id 2
>len 10
>000284: *Mar 1 06:13:49.415 PCTime: Vi1 IPCP: Address 195.244.254.34
>(0x0306C3F4FE22)
>000285: *Mar 1 06:13:49.415 PCTime: Vi1 IPCP: State is Open
>000286: *Mar 1 06:13:49.415 PCTime: Di0 IPCP: Install negotiated IP
>interface address 195.244.254.34
>000287: *Mar 1 06:13:49.419 PCTime: Di0 IPCP: Install route to
>195.244.255.50
>000288: *Mar 1 06:13:49.419 PCTime: Vi1 IPCP: Add link info for cef
>entry 195.244.255.50
>000289: *Mar 1 06:13:50.319 PCTime: %LINEPROTO-5-UPDOWN: Line protocol
>on Interface Virtual-Access1, changed state to up
>
>
>
>
>
>--
>Joerg Schmuetz
>NetUSE AG
>Dr.-Hell-Strasse, D-24107 Kiel, Germany
>Telefon: +49 431 2390 400 -- Telefax: +49 431 2390 499
>_______________________________________________
>cisco-nas mailing list
>cisco-nas@puck.nether.net
>https://puck.nether.net/mailman/listinfo/cisco-nas

_______________________________________________
cisco-nas mailing list
cisco-nas@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nas
Re: (solved) Problem with PPPOE dialin + aaa new-model [ In reply to ]
Mark Johnson wrote:
> At 04:04 PM 11/15/2005 +0100, Joerg Schmuetz wrote:
>
>> Hello list,
>>
>> I have got a problem with a Cisco 871, IOS 12.4(2)T1.
>>
>> With "no aaa new-model" my PPPOE-connection comes up and is running. But
>> when I enter "aaa new-model" it doesn't work.
>>
>> I want to use the "aaa username..." to define VPN-users via EasyVPN
>> server.
>> I am using CHAP for authentication of my DSL connection.
>
>
> Try adding <ppp pap refuse> to the dialer interface, when AAA is
> enabled. Otherwise,
> if you do want to be able to use PAP for authentication, you need to add
> <ppp pap
> sent-username foo password bar> to the dialer.

Yes, with "ppp pap refuse" and AAA enabled it works!

_______________________________________________
cisco-nas mailing list
cisco-nas@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nas