Mailing List Archive

virtual-Profile question
Hello,

My problem is that I would like to do that all ppp configuration parameters
for a dialin user like pap or chap authentication,auth lists etc can be get
from a virtual-template for all dialin user. And on Physical interfaces like
group-async and serial could be only media specific parameters. This
configuration would be ideal for configuring because we use same auth list
for all kind of dialin user (modem/ISDN) and if an auth list changes I don't
have to change it on every serial and group async interfaces etc. I thought
It can be done easily with virtual profile. But life was not so easy. Or I
misunderstanded the Virtual Profile feature.I configured " virtual-profile
virtual-template 1" and "interface virtual-template 1 " with "encap ppp",
"ppp authentication pap listname", etc.....On the physical interfaces I
configured only the media specific components neither "encap ppp", nor "ppp
authentication pap listname", etc.....
And also the physical interfaces is neither configured for dialer profile
and nor for legacy ddr.
I thought it should be working. I thought that for all of the users dial-in
(no matters async or sync) an interface will be cloned from the virtual
template and ppp starts and the auth list on the virt. template is used for
authentication. But it didn't work. The NAS did wholly other thing. If I
dial in the AS with modem the PPP starts on the async, but there is no
"encap ppp" on group async interface.
I think because of the autoselect ppp on the line. And then searches the
authentication list on group async only (there was no auth list on it) and
don't be engaged in using the auth list on virt-template. But, the cloning
is succesful, ios makes virt. acces interface and I dial in without
authentication with any kind of user/pass. If I dial with ISDN there is even
no ppp on the physical serial interfaces and the PPP didn't start.
If someone know the solution please help.

Thanks everyone response!



szicsu
Re: virtual-Profile question [ In reply to ]
> Hello,

> My problem is that I would like to do that all ppp configuration parameters
> for a dialin user like pap or chap authentication,auth lists etc can be get
> from a virtual-template for all dialin user. And on Physical interfaces like
> group-async and serial could be only media specific parameters. This
> configuration would be ideal for configuring because we use same auth list
> for all kind of dialin user (modem/ISDN) and if an auth list changes I don't
> have to change it on every serial and group async interfaces etc. I thought
> It can be done easily with virtual profile.

Yes, I agree with you, this is the most elegant design
(assuming that you don't want to have different policies
for async and ISDN calls.)

The downside of having all calls use virtual profiles is that
VP's use somewhat more CPU than using physical asyncs. This
can be significant if you are using a platform with a low
CPU/port ratio (like a 5800 with 1000 calls.)

The one thing you're missing:

"no virtual-profile if-needed"

Aaron

---

> But life was not so easy. Or I
> misunderstanded the Virtual Profile feature.I configured " virtual-profile
> virtual-template 1" and "interface virtual-template 1 " with "encap ppp",
> "ppp authentication pap listname", etc.....On the physical interfaces I
> configured only the media specific components neither "encap ppp", nor "ppp
> authentication pap listname", etc.....
> And also the physical interfaces is neither configured for dialer profile
> and nor for legacy ddr.
> I thought it should be working. I thought that for all of the users dial-in
> (no matters async or sync) an interface will be cloned from the virtual
> template and ppp starts and the auth list on the virt. template is used for
> authentication. But it didn't work. The NAS did wholly other thing. If I
> dial in the AS with modem the PPP starts on the async, but there is no
> "encap ppp" on group async interface.
> I think because of the autoselect ppp on the line. And then searches the
> authentication list on group async only (there was no auth list on it) and
> don't be engaged in using the auth list on virt-template. But, the cloning
> is succesful, ios makes virt. acces interface and I dial in without
> authentication with any kind of user/pass. If I dial with ISDN there is even
> no ppp on the physical serial interfaces and the PPP didn't start.
> If someone know the solution please help.

> Thanks everyone response!



> szicsu

> _______________________________________________
> cisco-nas mailing list
> cisco-nas@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nas
Re: virtual-Profile question [ In reply to ]
Virtual-profile virtual-access interfaces are created *after*
authentication. That means all LCP related (for example MRU) and
authentication parameters, must be configured on the physical
interface (async/group-async/ISDN). If you were to use RPM customer
profile templates:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fdial_c/fnsprt11/dafrpm.htm

the template is applied as soon as we bind to the profile (when we
answer the call), so this would line up more with what you may be
expecting. You may not need the flexibility/complexity of RPM though,
so you may want want to stick with manual configuration. One thing you
could do is put all your ISDN interfaces in one dialer rotary-group,
then you should just need to change the authentication method list on
the dialer interface and the group-async interface.

As for why PPP works on async but not ISDN when "encap ppp" is not
configured, you are right, this is due to the "autoselect" feature on
async interfaces and "async mode interactive" (which basically allows
the customer to choose what type of encapsulation they want to
use). On ISDN interfaces, I think you could do something similar by
configuring "autodetect encapsulation ppp".

Dennis

Matyas Szilard [szilard.matyas@enternet.hu] wrote:
> Hello,
>
> My problem is that I would like to do that all ppp configuration parameters
> for a dialin user like pap or chap authentication,auth lists etc can be get
> from a virtual-template for all dialin user. And on Physical interfaces like
> group-async and serial could be only media specific parameters. This
> configuration would be ideal for configuring because we use same auth list
> for all kind of dialin user (modem/ISDN) and if an auth list changes I don't
> have to change it on every serial and group async interfaces etc. I thought
> It can be done easily with virtual profile. But life was not so easy. Or I
> misunderstanded the Virtual Profile feature.I configured " virtual-profile
> virtual-template 1" and "interface virtual-template 1 " with "encap ppp",
> "ppp authentication pap listname", etc.....On the physical interfaces I
> configured only the media specific components neither "encap ppp", nor "ppp
> authentication pap listname", etc.....
> And also the physical interfaces is neither configured for dialer profile
> and nor for legacy ddr.
> I thought it should be working. I thought that for all of the users dial-in
> (no matters async or sync) an interface will be cloned from the virtual
> template and ppp starts and the auth list on the virt. template is used for
> authentication. But it didn't work. The NAS did wholly other thing. If I
> dial in the AS with modem the PPP starts on the async, but there is no
> "encap ppp" on group async interface.
> I think because of the autoselect ppp on the line. And then searches the
> authentication list on group async only (there was no auth list on it) and
> don't be engaged in using the auth list on virt-template. But, the cloning
> is succesful, ios makes virt. acces interface and I dial in without
> authentication with any kind of user/pass. If I dial with ISDN there is even
> no ppp on the physical serial interfaces and the PPP didn't start.
> If someone know the solution please help.
>
> Thanks everyone response!
>
>
>
> szicsu
>
> _______________________________________________
> cisco-nas mailing list
> cisco-nas@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nas
Re: virtual-Profile question [ In reply to ]
Hello Dennis!

Thanks very much for your reply. I tried it with resource pool customer
profile template and it works with async but don't work with ISDN. when I
dial in with
ISDN PPP don't start. I included my config and debugs. Please run through it
if you have time.

Thanks in advance!

Szicsu






My config:

C5350-test#sh run
Building configuration...

Current configuration : 3164 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname C5350-test
!
boot system flash flash:c5350-is-mz.122-15.T8.bin
no boot startup-test
logging queue-limit 100
logging buffered 16384 debugging
no logging console
enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxxx
!
username red password xxxxxxxxxxxxxxxxxxxx
username tesztdial password 7 xxxxxxxxxxxxxxxxxxx
!
!
resource-pool enable
resource-pool call treatment resource busy
resource-pool call treatment profile busy
resource-pool call treatment discriminator busy
!
resource-pool group resource NEXTPORT
range port 1/0 1/59
pool-alloc round-robin
!
resource-pool group resource ISDN
range limit 3
!
resource-pool profile customer CUST1
limit base-size 30
limit overflow-size 0
resource ISDN digital
resource NEXTPORT speech
dnis group DNIS210
source template ISDN+MODEM
resource-pool aaa protocol local
clock timezone MET 1
clock summer-time MET recurring last Sun Mar 3:00 last Sun Oct 3:00
tdm clock priority 1 3/0
tdm clock priority 2 3/1
spe default-firmware spe-firmware-1
aaa new-model
!
!
aaa authentication login default local
aaa authentication ppp dialin local
aaa authorization network dialin local
aaa session-id common
ip subnet-zero
no ip cef
ip name-server 62.112.192.4
ip name-server 62.112.192.3
!
isdn switch-type primary-net5
!
template ISDN+MODEM
peer default ip address pool dialin
ppp authentication pap dialin
ppp authorization dialin
ppp multilink
dialer idle-timeout 0
keepalive 20
!
!
!
!
!
!
!
!
!
no voice hpi capture buffer
no voice hpi capture destination
!
!
!
mta receive maximum-recipients 0
!
!
!
controller E1 3/0
framing NO-CRC4
pri-group timeslots 1-31
!
controller E1 3/1
!
!
interface FastEthernet0/0
ip address xxxxxxxxxxxxxxxxxxxxxxx
duplex full
speed 100
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0
no ip address
shutdown
clockrate 2000000
!
interface Serial0/1
no ip address
shutdown
clockrate 2000000
!
interface Serial3/0:15
ip unnumbered FastEthernet0/0
dialer idle-timeout 0
autodetect encapsulation ppp
isdn switch-type primary-net5
isdn incoming-voice modem
keepalive 20
!
interface Group-Async0
ip unnumbered FastEthernet0/0
ip tcp header-compression
dialer in-band
dialer idle-timeout 0
async mode interactive
keepalive 20 3
group-range 1/00 1/59
hold-queue 75 in
!
ip local pool dialin 192.168.100.1 192.168.100.10
ip classless
ip route 0.0.0.0 0.0.0.0 [ip on the f0/0]
no ip http server
!
!
!
!
dialer dnis group DNIS210
number 210
!
!
radius-server authorization permit missing Service-Type
call rsvp-sync
!
voice-port 3/0:D
!
!
mgcp profile default
!
dial-peer cor custom
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
session-timeout 30
timeout login response 20
transport input telnet
line vty 5 16
session-timeout 30
timeout login response 20
transport input telnet
line 1/00 1/59
no flush-at-activation
no modem callout
modem Dialin
modem autoconfigure type nextport
transport input all
autoselect during-login
autoselect ppp
!
scheduler allocate 10000 400
end

My debugs:

sh deb
General OS:
AAA Authentication debugging is on
AAA Authorization debugging is on
Resource Pool:
resource-pool general debugging is on
PPP:
PPP authentication debugging is on
PPP protocol negotiation debugging is on

template:
Template debugging is on


Dialing in with ISDN:

*Oct 15 13:15:37.423: AAA/BIND(00000009): Bind i/f Serial3/0:4
*Oct 15 13:15:37.423: AAA/ACCT/DS0: channel=4, ds1=0, t3=0, slot=3,
ds0=50331652
*Oct 15 13:15:37.423: AAA/ACCT/DS0: channel=4, ds1=0, t3=0, slot=3,
ds0=50331652
*Oct 15 13:15:37.423: RM0/0 state:RM_IDLE event:DIALER_INCALL/0 DS0:0:3:0:4
*Oct 15 13:15:37.423: RM DNIS: 210 CLID: 4121228 Call-Type: digital
*Oct 15 13:15:37.423: RM1/0 state:RM_DNIS_AUTHOR event:RM_DNIS_RPM_REQUEST/0
DS0:0:3:0:4
*Oct 15 13:15:37.423: RM:RPM event incoming call
*Oct 15 13:15:37.423: AAA: parse name=DS0:0:3:0:4 idb type=-1 tty=-1
*Oct 15 13:15:37.423: AAA/MEMORY: create_user (0x641DF48C) user='210'
ruser='NULL' ds0=0 port='DS0:0:3:0:4' rem_addr='4121228' authen_type=NONE
service=NONE priv=0 initial_task_id='0', vrf= (id=0)
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM call-accept(3817083048):
Port='DS0:0:3:0:4' list='default' service=RM
*Oct 15 13:15:37.427: AAA/AUTHOR/RM call-accept: DS0:0:3:0:4(3817083048)
user='210'
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM call-accept(3817083048):
send AV service=resource-management
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM call-accept(3817083048):
send AV protocol=call-accept
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM call-accept(3817083048):
send AV rm-protocol-version=1.0
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM call-accept(3817083048):
send AV rm-nas-state=1679692128
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM call-accept(3817083048):
send AV rm-call-type=digital
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM call-accept(3817083048):
send AV rm-request-type=dial-in
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM call-accept(3817083048):
send AV rm-link-type=isdn
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM call-accept(3817083048):
found list "default"
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM call-accept(3817083048):
Method=LOCAL
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/local (3817083048): Received
DNIS=210
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/local (3817083048): Received
CLID=4121228
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/local (3817083048): Received
Port=DS0:0:3:0:4
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/local (3817083048): Received
AV service=resource-management
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/local (3817083048): Received
AV protocol=call-accept
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/local (3817083048): Received
AV rm-protocol-version=1.0
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/local (3817083048): Received
AV rm-nas-state=1679692128
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/local (3817083048): Received
AV rm-call-type=digital
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/local (3817083048): Received
AV rm-request-type=dial-in
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/local (3817083048): Received
AV rm-link-type=isdn
*Oct 15 13:15:37.427: RPM profile CUST1 found
*Oct 15 13:15:37.427: AAA/AUTHOR (3817083048): Post authorization status =
PASS_REPL
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV service=resource-management
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV protocol=call-accept
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV rm-protocol-version=1.0
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV server-name*local
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV rm-response-code=ack
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV rm-call-handle=4
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV rm-call-count=1
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV rm-cp-name=CUST1
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV rm-template-name=ISDN+MODEM
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV rm-rg-name#0=ISDN
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV rm-call-treatment=busy
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV rm-call-type=digital
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV rm-nas-state=1679692128
*Oct 15 13:15:37.427: RM2/0 state:RM_RPM_RES_AUTHOR
event:RM_RPM_RES_AUTHOR_SUCCESS/0 DS0:0:3:0:4
*Oct 15 13:15:37.427: Allocated resource from res_group ISDN
*Oct 15 13:15:37.431: RM:RPM profile "CUST1", allocated resource "ISDN"
successfully
*Oct 15 13:15:37.431: DS0:0:3:0:4 RM/AAA/ACCT: Ignore start record for
locally authorized call
*Oct 15 13:15:37.431: RM3/0 state:RM_RPM_RES_ALLOCATING
event:RM_RPM_RES_ALLOC_SUCCESS/0 DS0:0:0:0:4
*Oct 15 13:15:37.431: Se3/0:4: Binding template ISDN+MODEM

At this point wait for a while......

*Oct 15 13:16:14.763: AAA/ACCT/DS0: channel=4, ds1=0, t3=0, slot=3,
ds0=50331652
*Oct 15 13:16:14.763: RM0/0 state:RM_RPM_RES_ALLOCATED event:DIALER_DISCON/0
DS0:0:0:0:4
*Oct 15 13:16:14.763: RM:RPM event call drop
*Oct 15 13:16:14.763: Deallocated resource from res_group ISDN
*Oct 15 13:16:14.763: Se3/0:4 AAA/ACCT/RM: doing resource-freed (local)
CUST1 (nothing to do)
*Oct 15 13:16:14.763: AAA/MEMORY: free_user (0x641DF48C) user='210'
ruser='NULL' port='DS0:0:3:0:4' rem_addr='4121228' authen_type=NONE
service=NONE priv=0 vrf= (id=0)
*Oct 15 13:16:14.763: RM1/0 state:RM_RPM_DISCONNECTING
event:RM_RPM_DISC_ACK/0 DS0:0:0:0:4


Dial in with modem:


C5350-test#
*Oct 15 13:33:02.343: AAA/BIND(0000000E): Bind i/f Serial3/0:9
*Oct 15 13:33:02.347: AAA/ACCT/DS0: channel=9, ds1=0, t3=0, slot=3,
ds0=50331657
*Oct 15 13:33:02.347: AAA/ACCT/DS0: channel=9, ds1=0, t3=0, slot=3,
ds0=50331657
*Oct 15 13:33:02.347: RM0/0 state:RM_IDLE event:DIALER_INCALL/0 DS0:0:3:0:9
*Oct 15 13:33:02.347: RM DNIS: 210 CLID: 8882083 Call-Type: speech
*Oct 15 13:33:02.347: RM1/0 state:RM_DNIS_AUTHOR event:RM_DNIS_RPM_REQUEST/0
DS0:0:3:0:9
*Oct 15 13:33:02.347: RM:RPM event incoming call
*Oct 15 13:33:02.347: AAA: parse name=DS0:0:3:0:9 idb type=-1 tty=-1
*Oct 15 13:33:02.347: AAA/MEMORY: create_user (0x641DF8C0) user='210'
ruser='NULL' ds0=0 port='DS0:0:3:0:9' rem_addr='8882083' authen_type=NONE
service=NONE priv=0 initial_task_id='0', vrf= (id=0)
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM call-accept(2691971174):
Port='DS0:0:3:0:9' list='default' service=RM
*Oct 15 13:33:02.347: AAA/AUTHOR/RM call-accept: DS0:0:3:0:9(2691971174)
user='210'
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM call-accept(2691971174):
send AV service=resource-management
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM call-accept(2691971174):
send AV protocol=call-accept
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM call-accept(2691971174):
send AV rm-protocol-version=1.0
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM call-accept(2691971174):
send AV rm-nas-state=1679604432
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM call-accept(2691971174):
send AV rm-call-type=speech
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM call-accept(2691971174):
send AV rm-request-type=dial-in
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM call-accept(2691971174):
send AV rm-link-type=isdn
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM call-accept(2691971174):
found list "default"
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM call-accept(2691971174):
Method=LOCAL
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM/local (2691971174): Received
DNIS=210
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM/local (2691971174): Received
CLID=8882083
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM/local (2691971174): Received
Port=DS0:0:3:0:9
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM/local (2691971174): Received
AV service=resource-management
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM/local (2691971174): Received
AV protocol=call-accept
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM/local (2691971174): Received
AV rm-protocol-version=1.0
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM/local (2691971174): Received
AV rm-nas-state=1679604432
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM/local (2691971174): Received
AV rm-call-type=speech
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM/local (2691971174): Received
AV rm-request-type=dial-in
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM/local (2691971174): Received
AV rm-link-type=isdn
*Oct 15 13:33:02.347: RPM profile CUST1 found
*Oct 15 13:33:02.347: AAA/AUTHOR (2691971174): Post authorization status =
PASS_REPL
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV service=resource-management
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV protocol=call-accept
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV rm-protocol-version=1.0
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV server-name*local
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV rm-response-code=ack
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV rm-call-handle=9
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV rm-call-count=1
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV rm-cp-name=CUST1
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV rm-template-name=ISDN+MODEM
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV rm-rg-name#0=NEXTPORT
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV rm-call-treatment=busy
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV rm-call-type=speech
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV rm-nas-state=1679604432
*Oct 15 13:33:02.351: RM2/0 state:RM_RPM_RES_AUTHOR
event:RM_RPM_RES_AUTHOR_SUCCESS/0 DS0:0:3:0:9
*Oct 15 13:33:02.351: Allocated resource from res_group NEXTPORT
*Oct 15 13:33:02.351: RM:RPM profile "CUST1", allocated resource "NEXTPORT"
successfully
*Oct 15 13:33:02.351: DS0:0:3:0:9 RM/AAA/ACCT: Ignore start record for
locally authorized call
*Oct 15 13:33:02.351: RM3/0 state:RM_RPM_RES_ALLOCATING
event:RM_RPM_RES_ALLOC_SUCCESS/0 DS0:0:1:2:9
*Oct 15 13:33:02.351: RM:RPM:Alloc Success:218:2004:6339CAB0
*Oct 15 13:33:02.351: As1/02: Binding template ISDN+MODEM
*Oct 15 13:33:27.619: AAA/AUTHEN/LOGIN (0000000E): Pick method list
'default'
*Oct 15 13:33:27.623: RM/AAA: modem connect speeds for tty 218 is tx: 38667,
rx: 28800
*Oct 15 13:33:28.211: As1/02 PPP: Phase is DOWN, Setup
*Oct 15 13:33:28.215: As1/02 PPP: Using dialer call direction
*Oct 15 13:33:28.215: As1/02 PPP: Treating connection as a callin
*Oct 15 13:33:28.215: As1/02 PPP: Phase is ESTABLISHING, Passive Open
*Oct 15 13:33:28.215: As1/02 LCP: State is Listen
*Oct 15 13:33:30.207: As1/02 LCP: TIMEout: State Listen
*Oct 15 13:33:30.207: As1/02 PPP: Authorization required
*Oct 15 13:33:30.207: As1/02 AAA/AUTHOR/LCP: Authorization succeeds
trivially
*Oct 15 13:33:30.207: As1/02 LCP: O CONFREQ [Listen] id 1 len 41
*Oct 15 13:33:30.207: As1/02 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Oct 15 13:33:30.207: As1/02 LCP: AuthProto PAP (0x0304C023)
*Oct 15 13:33:30.207: As1/02 LCP: MagicNumber 0x0471CC7D (0x05060471CC7D)
*Oct 15 13:33:30.207: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:30.207: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:30.207: As1/02 LCP: MRRU 1524 (0x110405F4)
*Oct 15 13:33:30.207: As1/02 LCP: EndpointDisc 1 C5350-test
(0x130D0143353335302D74657374)
*Oct 15 13:33:30.207: As1/02 LCP: I CONFREQ [REQsent] id 1 len 23
*Oct 15 13:33:30.207: As1/02 LCP: ACCM 0x00000000 (0x020600000000)
*Oct 15 13:33:30.207: As1/02 LCP: MagicNumber 0x550861EC (0x0506550861EC)
*Oct 15 13:33:30.207: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:30.207: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:30.207: As1/02 LCP: Callback 6 (0x0D0306)
*Oct 15 13:33:30.207: As1/02 LCP: O CONFREJ [REQsent] id 1 len 7
*Oct 15 13:33:30.207: As1/02 LCP: Callback 6 (0x0D0306)
*Oct 15 13:33:30.315: As1/02 LCP: I CONFREJ [REQsent] id 1 len 21
*Oct 15 13:33:30.315: As1/02 LCP: MRRU 1524 (0x110405F4)
*Oct 15 13:33:30.315: As1/02 LCP: EndpointDisc 1 C5350-test
(0x130D0143353335302D74657374)
*Oct 15 13:33:30.315: As1/02 LCP: O CONFREQ [REQsent] id 2 len 24
*Oct 15 13:33:30.315: As1/02 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Oct 15 13:33:30.315: As1/02 LCP: AuthProto PAP (0x0304C023)
*Oct 15 13:33:30.315: As1/02 LCP: MagicNumber 0x0471CC7D (0x05060471CC7D)
*Oct 15 13:33:30.319: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:30.319: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:30.415: As1/02 LCP: I CONFACK [REQsent] id 2 len 24
*Oct 15 13:33:30.415: As1/02 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Oct 15 13:33:30.415: As1/02 LCP: AuthProto PAP (0x0304C023)
*Oct 15 13:33:30.415: As1/02 LCP: MagicNumber 0x0471CC7D (0x05060471CC7D)
*Oct 15 13:33:30.415: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:30.415: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:32.319: As1/02 LCP: TIMEout: State ACKrcvd
*Oct 15 13:33:32.319: As1/02 LCP: O CONFREQ [ACKrcvd] id 3 len 24
*Oct 15 13:33:32.319: As1/02 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Oct 15 13:33:32.319: As1/02 LCP: AuthProto PAP (0x0304C023)
*Oct 15 13:33:32.319: As1/02 LCP: MagicNumber 0x0471CC7D (0x05060471CC7D)
*Oct 15 13:33:32.319: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:32.319: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:32.407: As1/02 LCP: I CONFACK [REQsent] id 3 len 24
*Oct 15 13:33:32.407: As1/02 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Oct 15 13:33:32.407: As1/02 LCP: AuthProto PAP (0x0304C023)
*Oct 15 13:33:32.407: As1/02 LCP: MagicNumber 0x0471CC7D (0x05060471CC7D)
*Oct 15 13:33:32.407: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:32.407: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:34.335: As1/02 LCP: TIMEout: State ACKrcvd
*Oct 15 13:33:34.335: As1/02 LCP: O CONFREQ [ACKrcvd] id 4 len 24
*Oct 15 13:33:34.335: As1/02 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Oct 15 13:33:34.335: As1/02 LCP: AuthProto PAP (0x0304C023)
*Oct 15 13:33:34.335: As1/02 LCP: MagicNumber 0x0471CC7D (0x05060471CC7D)
*Oct 15 13:33:34.335: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:34.335: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:36.351: As1/02 LCP: TIMEout: State REQsent
*Oct 15 13:33:36.351: As1/02 LCP: O CONFREQ [REQsent] id 5 len 24
*Oct 15 13:33:36.351: As1/02 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Oct 15 13:33:36.351: As1/02 LCP: AuthProto PAP (0x0304C023)
*Oct 15 13:33:36.351: As1/02 LCP: MagicNumber 0x0471CC7D (0x05060471CC7D)
*Oct 15 13:33:36.351: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:36.351: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:36.959: As1/02 LCP: I CONFREQ [REQsent] id 2 len 23
*Oct 15 13:33:36.959: As1/02 LCP: ACCM 0x00000000 (0x020600000000)
*Oct 15 13:33:36.959: As1/02 LCP: MagicNumber 0x550861EC (0x0506550861EC)
*Oct 15 13:33:36.959: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:36.959: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:36.959: As1/02 LCP: Callback 6 (0x0D0306)
*Oct 15 13:33:36.959: As1/02 LCP: O CONFREJ [REQsent] id 2 len 7
*Oct 15 13:33:36.959: As1/02 LCP: Callback 6 (0x0D0306)
*Oct 15 13:33:36.971: As1/02 LCP: I CONFACK [REQsent] id 4 len 24
*Oct 15 13:33:36.971: As1/02 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Oct 15 13:33:36.971: As1/02 LCP: AuthProto PAP (0x0304C023)
*Oct 15 13:33:36.971: As1/02 LCP: MagicNumber 0x0471CC7D (0x05060471CC7D)
*Oct 15 13:33:36.971: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:36.971: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:36.971: As1/02 LCP: ID 4 didn't match 5, discarding packet
*Oct 15 13:33:36.979: As1/02 LCP: I CONFACK [REQsent] id 5 len 24
*Oct 15 13:33:36.979: As1/02 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Oct 15 13:33:36.979: As1/02 LCP: AuthProto PAP (0x0304C023)
*Oct 15 13:33:36.979: As1/02 LCP: MagicNumber 0x0471CC7D (0x05060471CC7D)
*Oct 15 13:33:36.979: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:36.979: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:37.047: As1/02 LCP: I CONFREQ [ACKrcvd] id 3 len 20
*Oct 15 13:33:37.047: As1/02 LCP: ACCM 0x00000000 (0x020600000000)
*Oct 15 13:33:37.047: As1/02 LCP: MagicNumber 0x550861EC (0x0506550861EC)
*Oct 15 13:33:37.047: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:37.047: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:37.047: As1/02 LCP: O CONFACK [ACKrcvd] id 3 len 20
*Oct 15 13:33:37.047: As1/02 LCP: ACCM 0x00000000 (0x020600000000)
*Oct 15 13:33:37.047: As1/02 LCP: MagicNumber 0x550861EC (0x0506550861EC)
*Oct 15 13:33:37.047: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:37.047: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:37.051: As1/02 LCP: State is Open
*Oct 15 13:33:37.051: As1/02 PPP: Phase is AUTHENTICATING, by this end
*Oct 15 13:33:37.159: As1/02 LCP: I IDENTIFY [Open] id 4 len 18 magic
0x550861EC MSRASV5.10
*Oct 15 13:33:37.159: As1/02 LCP: I IDENTIFY [Open] id 5 len 22 magic
0x550861EC MSRAS-0-SZICSU
*Oct 15 13:33:37.159: As1/02 PAP: I AUTH-REQ id 8 len 23 from "tesztdial"
*Oct 15 13:33:37.159: As1/02 PAP: Authenticating peer tesztdial
*Oct 15 13:33:37.159: As1/02 PPP: Phase is FORWARDING, Attempting Forward
*Oct 15 13:33:37.159: As1/02 PPP: Phase is AUTHENTICATING, Unauthenticated
User
*Oct 15 13:33:37.159: AAA/AUTHEN/PPP (0000000E): Pick method list 'dialin'
*Oct 15 13:33:37.159: As1/02 PPP: Sent PAP LOGIN Request
*Oct 15 13:33:37.159: As1/02 PPP: Received LOGIN Response PASS
*Oct 15 13:33:37.159: As1/02 PPP: Phase is FORWARDING, Attempting Forward
*Oct 15 13:33:37.159: As1/02 PPP: Phase is AUTHENTICATING, Authenticated
User
*Oct 15 13:33:37.159: AAA/AUTHOR (0xE): Pick method list 'dialin'
*Oct 15 13:33:37.159: As1/02 PPP: Sent LCP AUTHOR Request
*Oct 15 13:33:37.159: As1/02 LCP: Received AAA AUTHOR Response PASS
*Oct 15 13:33:37.163: As1/02 PPP/AAA: Check Attr: Framed-Protocol
*Oct 15 13:33:37.163: As1/02 PPP/AAA: Check Attr: username
*Oct 15 13:33:37.163: As1/02 AAA/AUTHOR/FSM: We can start LCP
*Oct 15 13:33:37.163: As1/02 AAA/AUTHOR/LCP: Process Author
*Oct 15 13:33:37.163: As1/02 PAP: O AUTH-ACK id 8 len 5
*Oct 15 13:33:37.163: As1/02 PPP: Phase is UP
*Oct 15 13:33:37.163: As1/02 AAA/AUTHOR/IPCP: FSM authorization not needed
*Oct 15 13:33:37.163: As1/02 AAA/AUTHOR/FSM: We can start IPCP
*Oct 15 13:33:37.163: As1/02 IPCP: O CONFREQ [Closed] id 1 len 16
*Oct 15 13:33:37.163: As1/02 IPCP: CompressType VJ 15 slots
(0x0206002D0F00)
*Oct 15 13:33:37.163: As1/02 IPCP: Address [ip on the f0/0]
(0x03063E70C0A4)
*Oct 15 13:33:37.163: As1/02 PPP: Process pending packets
*Oct 15 13:33:38.135: As1/02 IPCP: I CONFREQ [REQsent] id 6 len 40
*Oct 15 13:33:38.135: As1/02 IPCP: CompressType VJ 15 slots
CompressSlotID (0x0206002D0F01)
*Oct 15 13:33:38.135: As1/02 IPCP: Address 0.0.0.0 (0x030600000000)
*Oct 15 13:33:38.135: As1/02 IPCP: PrimaryDNS 0.0.0.0 (0x810600000000)
*Oct 15 13:33:38.135: As1/02 IPCP: PrimaryWINS 0.0.0.0 (0x820600000000)
*Oct 15 13:33:38.135: As1/02 IPCP: SecondaryDNS 0.0.0.0 (0x830600000000)
*Oct 15 13:33:38.135: As1/02 IPCP: SecondaryWINS 0.0.0.0 (0x840600000000)
*Oct 15 13:33:38.135: As1/02 AAA/AUTHOR/IPCP: Start. Her address 0.0.0.0,
we want 0.0.0.0
*Oct 15 13:33:38.135: As1/02 AAA/AUTHOR/IPCP: Authorization succeeded
*Oct 15 13:33:38.135: As1/02 AAA/AUTHOR/IPCP: Done. Her address 0.0.0.0, we
want 0.0.0.0
*Oct 15 13:33:38.135: As1/02 IPCP: Pool returned 192.168.100.1
*Oct 15 13:33:38.135: As1/02 AAA/AUTHOR/IPCP: no author-info for primary dns
*Oct 15 13:33:38.135: As1/02 AAA/AUTHOR/IPCP: no author-info for primary
wins
*Oct 15 13:33:38.135: As1/02 AAA/AUTHOR/IPCP: no author-info for seconday
dns
*Oct 15 13:33:38.135: As1/02 AAA/AUTHOR/IPCP: no author-info for seconday
wins
*Oct 15 13:33:38.135: As1/02 IPCP: O CONFREJ [REQsent] id 6 len 16
*Oct 15 13:33:38.135: As1/02 IPCP: PrimaryWINS 0.0.0.0 (0x820600000000)
*Oct 15 13:33:38.135: As1/02 IPCP: SecondaryWINS 0.0.0.0 (0x840600000000)
*Oct 15 13:33:38.135: As1/02 IPCP: I CONFACK [REQsent] id 1 len 16
*Oct 15 13:33:38.135: As1/02 IPCP: CompressType VJ 15 slots
(0x0206002D0F00)
*Oct 15 13:33:38.135: As1/02 IPCP: Address [ip on the f0/0]
(0x03063E70C0A4)
*Oct 15 13:33:38.223: As1/02 IPCP: I CONFREQ [ACKrcvd] id 7 len 28
*Oct 15 13:33:38.223: As1/02 IPCP: CompressType VJ 15 slots
CompressSlotID (0x0206002D0F01)
*Oct 15 13:33:38.223: As1/02 IPCP: Address 0.0.0.0 (0x030600000000)
*Oct 15 13:33:38.223: As1/02 IPCP: PrimaryDNS 0.0.0.0 (0x810600000000)
*Oct 15 13:33:38.223: As1/02 IPCP: SecondaryDNS 0.0.0.0 (0x830600000000)
*Oct 15 13:33:38.223: As1/02 AAA/AUTHOR/IPCP: no author-info for primary dns
*Oct 15 13:33:38.223: As1/02 AAA/AUTHOR/IPCP: no author-info for seconday
dns
*Oct 15 13:33:38.223: As1/02 IPCP: O CONFNAK [ACKrcvd] id 7 len 22
*Oct 15 13:33:38.223: As1/02 IPCP: Address 192.168.100.1 (0x0306C0A86401)
*Oct 15 13:33:38.223: As1/02 IPCP: PrimaryDNS 62.112.192.4
(0x81063E70C004)
*Oct 15 13:33:38.223: As1/02 IPCP: SecondaryDNS 62.112.192.3
(0x83063E70C003)
*Oct 15 13:33:38.391: As1/02 IPCP: I CONFREQ [ACKrcvd] id 8 len 28
*Oct 15 13:33:38.391: As1/02 IPCP: CompressType VJ 15 slots
CompressSlotID (0x0206002D0F01)
*Oct 15 13:33:38.391: As1/02 IPCP: Address 192.168.100.1 (0x0306C0A86401)
*Oct 15 13:33:38.391: As1/02 IPCP: PrimaryDNS 62.112.192.4
(0x81063E70C004)
*Oct 15 13:33:38.391: As1/02 IPCP: SecondaryDNS 62.112.192.3
(0x83063E70C003)
*Oct 15 13:33:38.391: As1/02 AAA/AUTHOR/IPCP: no author-info for primary dns
*Oct 15 13:33:38.391: As1/02 AAA/AUTHOR/IPCP: no author-info for seconday
dns
*Oct 15 13:33:38.391: As1/02 IPCP: O CONFACK [ACKrcvd] id 8 len 28
*Oct 15 13:33:38.391: As1/02 IPCP: CompressType VJ 15 slots
CompressSlotID (0x0206002D0F01)
*Oct 15 13:33:38.391: As1/02 IPCP: Address 192.168.100.1 (0x0306C0A86401)
*Oct 15 13:33:38.391: As1/02 IPCP: PrimaryDNS 62.112.192.4
(0x81063E70C004)
*Oct 15 13:33:38.391: As1/02 IPCP: SecondaryDNS 62.112.192.3
(0x83063E70C003)
*Oct 15 13:33:38.391: As1/02 IPCP: State is Open
*Oct 15 13:33:38.391: As1/02 IPCP: Install route to 192.168.100.1

Dialing in Succesfull

Disconnecting...............................


*Oct 15 13:33:38.391: As1/02 IPCP: Add link info for cef entry 192.168.100.1
*Oct 15 13:34:08.591: As1/02 LCP: I TERMREQ [Open] id 9 len 16
(0x550861EC003CCD7400000000)
*Oct 15 13:34:08.591: As1/02 LCP: O TERMACK [Open] id 9 len 4
*Oct 15 13:34:08.591: As1/02 PPP: Sending Acct Event[Down] id[E]
*Oct 15 13:34:08.591: As1/02 IPCP: Remove link info for cef entry
192.168.100.1
*Oct 15 13:34:08.591: As1/02 IPCP: State is Closed
*Oct 15 13:34:08.591: As1/02 PPP: Phase is TERMINATING
*Oct 15 13:34:08.591: As1/02 IPCP: Remove route to 192.168.100.1
*Oct 15 13:34:09.359: AAA/ACCT/DS0: channel=9, ds1=0, t3=0, slot=3,
ds0=50331657
*Oct 15 13:34:09.359: RM0/0 state:RM_RPM_RES_ALLOCATED event:DIALER_DISCON/0
DS0:0:1:2:9
*Oct 15 13:34:09.359: RM:RPM event call drop
*Oct 15 13:34:09.359: rpa_dealloc_res:Deallocate resource from
res_group=NEXTPORT
*Oct 15 13:34:09.359: As1/02 AAA/ACCT/RM: doing resource-freed (local) CUST1
(nothing to do)
*Oct 15 13:34:09.359: AAA/MEMORY: free_user (0x641DF8C0) user='210'
ruser='NULL' port='DS0:0:3:0:9' rem_addr='8882083' authen_type=NONE
service=NONE priv=0 vrf= (id=0)
*Oct 15 13:34:09.359: RM1/0 state:RM_RPM_DISCONNECTING
event:RM_RPM_DISC_ACK/0 DS0:0:1:2:9
*Oct 15 13:34:10.367: rpa_dealloc_res:Deallocate resource from
res_group=NEXTPORT
*Oct 15 13:34:10.591: As1/02 LCP: TIMEout: State TERMsent
*Oct 15 13:34:10.591: As1/02 LCP: State is Closed
*Oct 15 13:34:10.591: As1/02 PPP: Phase is DOWN
*Oct 15 13:34:10.591: As1/02 PPP: Phase is ESTABLISHING, Passive Open
*Oct 15 13:34:10.591: As1/02 LCP: State is Listen
*Oct 15 13:34:10.595: As1/02 LCP: State is Closed
*Oct 15 13:34:10.595: As1/02 PPP: Phase is DOWN


----- Original Message -----
From: "Dennis Peng" <dpeng@cisco.com>
To: "Matyas Szilard" <szilard.matyas@enternet.hu>
Cc: <cisco-nas@puck.nether.net>
Sent: Wednesday, October 15, 2003 1:23 AM
Subject: Re: [cisco-nas] virtual-Profile question


> Virtual-profile virtual-access interfaces are created *after*
> authentication. That means all LCP related (for example MRU) and
> authentication parameters, must be configured on the physical
> interface (async/group-async/ISDN). If you were to use RPM customer
> profile templates:
>
>
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fdial_c/fnsprt11/dafrpm.htm
>
> the template is applied as soon as we bind to the profile (when we
> answer the call), so this would line up more with what you may be
> expecting. You may not need the flexibility/complexity of RPM though,
> so you may want want to stick with manual configuration. One thing you
> could do is put all your ISDN interfaces in one dialer rotary-group,
> then you should just need to change the authentication method list on
> the dialer interface and the group-async interface.
>
> As for why PPP works on async but not ISDN when "encap ppp" is not
> configured, you are right, this is due to the "autoselect" feature on
> async interfaces and "async mode interactive" (which basically allows
> the customer to choose what type of encapsulation they want to
> use). On ISDN interfaces, I think you could do something similar by
> configuring "autodetect encapsulation ppp".
>
> Dennis
>
> Matyas Szilard [szilard.matyas@enternet.hu] wrote:
> > Hello,
> >
> > My problem is that I would like to do that all ppp configuration
parameters
> > for a dialin user like pap or chap authentication,auth lists etc can be
get
> > from a virtual-template for all dialin user. And on Physical interfaces
like
> > group-async and serial could be only media specific parameters. This
> > configuration would be ideal for configuring because we use same auth
list
> > for all kind of dialin user (modem/ISDN) and if an auth list changes I
don't
> > have to change it on every serial and group async interfaces etc. I
thought
> > It can be done easily with virtual profile. But life was not so easy. Or
I
> > misunderstanded the Virtual Profile feature.I configured "
virtual-profile
> > virtual-template 1" and "interface virtual-template 1 " with "encap
ppp",
> > "ppp authentication pap listname", etc.....On the physical interfaces I
> > configured only the media specific components neither "encap ppp", nor
"ppp
> > authentication pap listname", etc.....
> > And also the physical interfaces is neither configured for dialer
profile
> > and nor for legacy ddr.
> > I thought it should be working. I thought that for all of the users
dial-in
> > (no matters async or sync) an interface will be cloned from the virtual
> > template and ppp starts and the auth list on the virt. template is used
for
> > authentication. But it didn't work. The NAS did wholly other thing. If
I
> > dial in the AS with modem the PPP starts on the async, but there is no
> > "encap ppp" on group async interface.
> > I think because of the autoselect ppp on the line. And then searches the
> > authentication list on group async only (there was no auth list on it)
and
> > don't be engaged in using the auth list on virt-template. But, the
cloning
> > is succesful, ios makes virt. acces interface and I dial in without
> > authentication with any kind of user/pass. If I dial with ISDN there is
even
> > no ppp on the physical serial interfaces and the PPP didn't start.
> > If someone know the solution please help.
> >
> > Thanks everyone response!
> >
> >
> >
> > szicsu
> >
> > _______________________________________________
> > cisco-nas mailing list
> > cisco-nas@puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nas
>