Specifications

4-22
Cisco AS5800 Operations, Administration, Maintenance, and Provisioning Guide
DOC-7810814=
Chapter 4 Administration
Access Service Security
• aaa authorization network radius local is used to assign an address and other network parameters
to the RADIUS user.
• aaa accounting network start-stop radius tracks PPP usage.
• aaa authentication login admins local defines another method list, “admins,” for login
authentication.
• login authentication admins applies the “admins” method list for login authentication.
Vendor-Proprietary RADIUS Configuration Example
The following example is a general configuration using vendor-proprietary RADIUS with the AAA
command set.
radius-server host alcatraz non-standard
radius-server key myRaDiUSpassWoRd
radius-server configure-nas
username root password ALongPassword
aaa authentication ppp dialins radius local
aaa authorization network radius local
aaa accounting network start-stop radius
aaa authentication login admins local
aaa authorization exec local
line 1 16
autoselect ppp
autoselect during-login
login authentication admins
modem ri-is-cd
interface group-async 1
encaps ppp
ppp authentication pap dialins
The lines in this example RADIUS AAA configurations are defined as follows:
• radius-server host non-standard defines the name of the RADIUS server host, and identifies that
this RADIUS host uses a vendor-proprietary version of RADIUS.
• radius-server key defines the shared secret text string between the network Cisco AS5800 and the
RADIUS server host.
• radius-server configure-nas defines that the Cisco AS5800 will query the RADIUS server for
static routes and IP pool definitions when the device first starts up.
• aaa authentication ppp dialins radius local defines the authentication method list “dialins,” which
specifies that RADIUS authentication, then (if the RADIUS server does not respond) local
authentication will be used on serial lines using PPP.
• ppp authentication pap dialins applies the “dialins” method list to the lines specified.
• aaa authorization network radius local is used to assign an address and other network parameters
to the RADIUS user.
• aaa accounting network start-stop radius tracks PPP usage.
• aaa authentication login admins local defines another method list, “admins,” for login
authentication.
• login authentication admins applies the “admins” method list for login authentication.