Specifications

Configuring per-User Configuration
Per-User Configuration Overview
DC-681
Cisco IOS Dial Technologies Configuration Guide
Figure 98 Per-User Configuration Authentication and Authorization
3.
A virtual access interface is created for this user.
a. The router finds the virtual template that is set up for virtual profiles, if any, and applies the
commands to the virtual access interface.
b. The router looks for the AV pairs to apply to this virtual access interface to configure it for the
dial-in user.
c. The AV pairs are sent to the Cisco IOS command-line parser, which interprets them as
configuration commands and applies them to configure this virtual access interface.
The result of this process is a virtual access interface configured uniquely for the dial-in user.
When the user ends the call, the virtual access interface is deleted and its resources are returned for other
dial-in uses.
Note The use of virtual profiles can modify the process that occurs between the user dial-in and the use of
AAA configuration information. For more information, see the chapter “Configuring Virtual
Profiles” in this publication.
Operational Processes with IP Address Pooling
During IP Control Protocol (IPCP) address negotiation, if an IP pool name is specified for a user, the
network access server checks whether the named pool is defined locally. If it is, no special action is
required and the pool is consulted for an IP address.
If the required pool is not present (either in the local configuration or as a result of a previous download
operation), an authorization call to obtain it is made using the special username:
pools -nas-name
where nas-name is the configured name of the network access server. In response, the AAA server
downloads the configuration of the required pool.
This pool username can be changed using Cisco IOS configuration, for example:
aaa configuration config-name nas1-pools-definition.cisco.us
This command has the effect of changing the username that is used to download the pool definitions from
the default name “pools-nas-name” to “nas1-pools-definition.cisco.com.”