From: Vazman@aol.com
Date: Tue Jul 27 2004 - 21:13:17 GMT-3
The callback string is in the username for backup.
What version of IOS are you running. I had similar problems on 12.2(1d)but I was not using multilink.
- Vazman
In a message dated 7/27/2004 8:01:28 PM Eastern Daylight Time, Phil <theccie@gmail.com> writes:
>You shouldn't have the callback string in the username command. It is
>supposed to be supplied by the TACACS+ server. How does your TACACS+
>consifuration looks like in the server?
>
>Phil
>
>On Tue, 27 Jul 2004 16:25:09 -0700 (PDT), Peng Zheng <zpnist@yahoo.com> wrote:
>> Configure R1-R3, R3 will callback R1 through tacacs+
>> authentication and authorization.
>>
>> Config on R1:
>>
>> hostname r1
>> !
>> !
>> username r3 password 0 CISCO
>> interface BRI0
>> ip address 192.168.45.4 255.255.255.0
>> encapsulation ppp
>> dialer map ip 192.168.45.5 name r3 broadcast
>> 4082222222
>> dialer-group 1
>> isdn switch-type basic-ni
>> isdn spid1 40811111111
>> isdn spid2 40811111112
>> ppp callback request
>> ppp authentication chap
>> ppp multilink
>> multilink min-links 2
>> dialer-list 1 protocol ip permit
>>
>> Config on R3:
>>
>> hostname r3
>> !
>> aaa new-model
>> aaa authentication ppp default group tacacs+ local
>> aaa authorization network default group tacacs+ local
>> !
>> username r1 callback-dialstring 4081111111 password 0
>> CISCO
>>
>> interface Ethernet0
>> ip address 192.168.1.3 255.255.255.0
>> interface BRI0
>> ip address 192.168.45.5 255.255.255.0
>> encapsulation ppp
>> dialer-group 1
>> isdn switch-type basic-ni
>> isdn spid1 40822222221
>> isdn spid2 40822222222
>> cdapi buffers regular 0
>> cdapi buffers raw 0
>> cdapi buffers large 0
>> ppp callback accept
>> ppp authentication chap
>> ppp multilink
>> multilink min-links 2
>> dialer-list 1 protocol ip permit
>> !
>> tacacs-server host 192.168.1.2 key cisco
>>
>> On tacacs+ server, I configured user r1 with
>> callback-string, Assigned by dialup client, PPP IP,
>> PPP LCP and PPP multilink
>>
>> R3 did callback, but disconnect immediately. I got:
>>
>> 01:13:45: %ISDN-6-DISCONNECT: Interface BRI0:1
>> disconnected from 4081111111 r1,
>> call lasted 2 seconds
>> 01:13:45: %LINK-3-UPDOWN: Interface BRI0:1, changed
>> state to down
>>
>> Any suggestion?
>>
>> __________________________________
>> Do you Yahoo!?
>> Yahoo! Mail Address AutoComplete - You start. We finish.
>> http://promotions.yahoo.com/new_mail
>>
>> _______________________________________________________________________
>> Please help support GroupStudy by purchasing your study materials from:
>> http://shop.groupstudy.com
>>
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>
>_______________________________________________________________________
>Please help support GroupStudy by purchasing your study materials from:
>http://shop.groupstudy.com
>
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Sun Aug 01 2004 - 10:12:04 GMT-3