Callback with tacacs+

From: Peng Zheng (zpnist@yahoo.com)
Date: Tue Jul 27 2004 - 20:25:09 GMT-3


Configure R1-R3, R3 will callback R1 through tacacs+
authentication and authorization.

Config on R1:

hostname r1
!
!
username r3 password 0 CISCO
interface BRI0
 ip address 192.168.45.4 255.255.255.0
 encapsulation ppp
 dialer map ip 192.168.45.5 name r3 broadcast
4082222222
 dialer-group 1
 isdn switch-type basic-ni
 isdn spid1 40811111111
 isdn spid2 40811111112
 ppp callback request
 ppp authentication chap
 ppp multilink
 multilink min-links 2
dialer-list 1 protocol ip permit

Config on R3:

hostname r3
!
aaa new-model
aaa authentication ppp default group tacacs+ local
aaa authorization network default group tacacs+ local
!
username r1 callback-dialstring 4081111111 password 0
CISCO

interface Ethernet0
 ip address 192.168.1.3 255.255.255.0
interface BRI0
 ip address 192.168.45.5 255.255.255.0
 encapsulation ppp
 dialer-group 1
 isdn switch-type basic-ni
 isdn spid1 40822222221
 isdn spid2 40822222222
 cdapi buffers regular 0
 cdapi buffers raw 0
 cdapi buffers large 0
 ppp callback accept
 ppp authentication chap
 ppp multilink
 multilink min-links 2
dialer-list 1 protocol ip permit
!
tacacs-server host 192.168.1.2 key cisco

On tacacs+ server, I configured user r1 with
callback-string, Assigned by dialup client, PPP IP,
PPP LCP and PPP multilink

R3 did callback, but disconnect immediately. I got:

01:13:45: %ISDN-6-DISCONNECT: Interface BRI0:1
disconnected from 4081111111 r1,
 call lasted 2 seconds
01:13:45: %LINK-3-UPDOWN: Interface BRI0:1, changed
state to down

Any suggestion?

                
__________________________________
Do you Yahoo!?
Yahoo! Mail Address AutoComplete - You start. We finish.
http://promotions.yahoo.com/new_mail



This archive was generated by hypermail 2.1.4 : Sun Aug 01 2004 - 10:12:04 GMT-3