Specifications

Configuring per-User Configuration
Configuration Examples for Per-User Configuration
DC-692
Cisco IOS Dial Technologies Configuration Guide
ip name-server 172.19.2.132
ipx routing 0000.0c47.12d3
ipx internal-network 40
!
interface Ethernet0
ip address 172.21.114.133 255.255.255.224
!
interface Virtual-Template1
no ip address
ipx ipxwan 0 unnumbered nas-Router2
no cdp enable
!
interface Serial1
ip unnumbered Ethernet0
encapsulation ppp
ipx ipxwan 0 unnumbered nas-Router2
ppp authentication chap
!
ipx sap 333 DEEP9 40.0000.0000.0001 999 10
!
virtual-profile virtual-template 1
tacacs-server host 172.21.114.130
tacacs-server key tac123
RADIUS Examples
This section provides the RADIUS versions of the following examples:
• IP Access Lists and Static Routes Using Virtual Profiles over ISDN BRI
• IPX Per-User SAP Filters Using IPXWAN and Virtual Profiles by a Synchronous Interface
IP Access Lists and Static Routes Using Virtual Profiles over ISDN BRI
The following example shows a remote peer (Router1) configured to dial in to a BRI on a Cisco network
access server (Router2), which requests user configuration information from an AAA server (radiusd):
RADIUS User File (Router1)
Password = "welcome"
User-Service-Type = Framed-User,
Framed-Protocol = PPP,
cisco-avpair = "ip:route=10.1.0.0 255.0.0.0",
cisco-avpair = "ip:route=10.2.0.0 255.0.0.0",
cisco-avpair = "ip:route=10.3.0.0 255.0.0.0",
cisco-avpair = "ip:inacl#5=deny 10.0.0.1"
Current Network Access Server Configuration
version 11.3
service timestamps debug datetime localtime
service udp-small-servers
service tcp-small-servers
!
hostname Router2
!
aaa new-model
aaa authentication ppp default radius
aaa authorization network radius
enable secret 5 $1$koOn$/1QAylov6JFAElxRCrL.o/
enable password lab