Router User Manual

Nortel Secure Router 8000 Series
Troubleshooting - VAS 1 AAA troubleshooting
Issue 01.01 (30 March 2009) Nortel Networks Inc. 1-7
1.2.2 Configuration notes
Item Sub-item Description
Configure the IP
address
The IP address on the client side must be the same as
that on the host side.
Configuring
serial
interfaces on
the client side
Configure PAP
user
authentication
The Password Authentication Protocol (PAP) user
name and password configured on the client side
must be consistent with those on the host side.
Configure the IP
address
The IP address on the host side must be in the same
network segment as that on the client side.
Configuring
serial interfaces
on the host side
Configure PPP
authentication
The PAP user name and password configured on the
host side must be consistent with those on the client
side.
Configure the
domain
Configure the domain to which a PAP user belongs. Configuring
AAA on the
host side
Configure the
local user
Configure the local user in the AAA view.
The following sections cover part of the commands for configuring AAA, RADIUS, and HWTACACS .
For more information, see Nortel Secure Router 8000 Series Configuration Guide - Security
(NN46240-600).
Configuring the serial interface on the client side
Configure an IP address for the serial interface. In PPP/PAP mode, you need to configure the
user name and password.
<Nortel> system-view
[Nortel] interface Serial 4/0/0
[Nortel-Serial4/0/0] ip address 9.1.1.1 255.255.255.0
[Nortel-Serial4/0/0] ppp pap local-user user001@nortel password simple abc123
[Nortel-Serial4/0/0] quit
Configuring the serial interface on the host side
Configure an IP address for the serial interface and set the PPP authentication mode to PAP.
[Nortel] interface Serial 1/1/0
[Nortel-Serial1/1/0] ip address 9.1.1.2 255.255.255.0
[Nortel-Serial1/1/0] ppp authentication-mode pap
[Nortel-Serial1/1/0] quit
Configuring AAA on the host side
Configure local authentication mode.
[Nortel] aaa
[Nortel-aaa] display this