ru.cisco

 
 - RU.CISCO ---------------------------------------------------------------------
 From : slava kozyrev                        2:5004/53.4    15 Aug 2005  10:24:37
 To : All
 Subject : cisco 2511 - 2611XM & tacacs+
 -------------------------------------------------------------------------------- 
 

 
 Имеем работающую связку 2511 - такакс+, dial-up пользователи ip
 получают из такакса+ (прописан в конфиге такакса).
 Берём конфиг 2511, правим немного, заливаем в 2611, в итоге на 2611
 авторизация происходит, но клиенту ppp не отдается его ip.
 
 это ppp говорит:
 ...
 PAP authentication succeeded
 ...
 Could not determine local IP address -  и отваливает.
 
 в acctfile видим:
 
 неудачная попытка на новую циску:
 2005/08/11 21:03:34     XXX.0.0.32       slava   Async33 CID:noAON
 service=ppp     Framed-Protocol=1       elapsed_time=1  bytes_in=165
 ----------------^^^^^^^^^^^^^^^^ ?
 bytes_out=107   paks_in=7       paks_out=7      disc-cause=1
 disc-cause-ext=28               
 
 удачная попытка в старую:
 2005/08/11 21:09:43     XXX.0.0.31       slava   Async8  CID:noAON
 service=ppp     addr=XXX.XXX.XXX.XXX  disc-cause=1    disc-cause-ext=1045
 bytes_in=217515 bytes_out=367065        paks_in=3639    paks_out=2701
 elapsed_time=1477       
 
 Версия IOSа:
 IOS (tm) C2600 Software (C2600-I-M), Version 12.3(10), RELEASE SOFTWARE (fc3)
 
 Конфиг с 2611XM
 
 !
 ! Last configuration change at 15:01:50 OMTS Fri Aug 12 2005 by slava
 !
 version 12.3
 service timestamps debug uptime
 service timestamps log uptime
 no service password-encryption
 !
 hostname cisco4
 !
 boot-start-marker
 boot-end-marker
 !
 enable secret 5 xxxxxxxxxx
 !
 username xxx password 0 xxxxx
 clock timezone OMT 6
 clock summer-time OMTS recurring last Sun Mar 3:00 last Sun Oct 3:00
 no network-clock-participate slot 1 
 no network-clock-participate wic 0 
 aaa new-model
 !
 !
 aaa authentication password-prompt password:
 aaa authentication username-prompt login:
 aaa authentication login default group tacacs+ enable
 aaa authentication login console enable
 aaa authentication login none none
 aaa authentication ppp default group tacacs+
 aaa authorization exec default group tacacs+ 
 aaa authorization exec ppp group tacacs+ 
 aaa authorization exec console local 
 aaa authorization network ppp group tacacs+ 
 aaa authorization reverse-access default none 
 aaa accounting network default stop-only group tacacs+
 aaa session-id common
 ip subnet-zero
 no ip rcmd domain-lookup
 ip rcmd rsh-enable
 ip cef
 !
 !
 ip domain name xxx.ru
 ip name-server xxx.0.0.10
 !
 async-bootp dns-server xxx.0.0.10
 !
 modemcap entry zyxel:FD=Z0:AA=S0=2:CID=*T:TPL=default
 modemcap entry
 Multitech:CD=&C1:DTR=&D3:HFL=&E4:SPD=$SB57600:DTE=57600:BER=&E1:BCP=&E15
 modemcap entry courier:BER=&M5:NER=&M5:TPL=usr_courier
 modemcap entry Multi224:DTR=&D2:SPD=$SB9600:DTE=9600:TPL=Multitech
 !
 !
 !
 interface FastEthernet0/0
  ip address xxx.0.0.32 255.255.255.0
  duplex auto
  speed auto
  no cdp enable
 !
 interface Serial0/0
  description Clear serial port
  bandwidth 2048
  no ip address
  shutdown
  no cdp enable
 !
 interface FastEthernet0/1
  no ip address
  shutdown
  duplex auto
  speed auto
  no cdp enable
 !
 interface Async33
  description "test"
  mtu 576
  ip address negotiated
  ip accounting output-packets
  encapsulation ppp
  async dynamic address
  async mode interactive
  no fair-queue
  ppp authentication pap
 !
 router eigrp 1
  network xxx.0.0.0
  no auto-summary
 !
 router rip
  redistribute connected
  redistribute static
  network xxx.0.0.0
 !
 ip http server
 ip classless
 ip route profile
 !
 !
 no cdp run
 tacacs-server host xxx.0.0.10
 no tacacs-server directed-request
 tacacs-server key Cisco 2
 privilege exec level 8 show ip accounting checkpoint
 privilege exec level 8 show ip accounting
 privilege exec level 1 show ip
 privilege exec level 1 show
 privilege exec level 8 clear ip accounting checkpoint
 privilege exec level 8 clear ip accounting
 privilege exec level 8 clear ip
 privilege exec level 8 clear
 !
 line con 0
  exec-timeout 0 0
  logging synchronous level 0
  login authentication console
  telnet speed 9600 38400
 line 33
  session-timeout 5 
  autobaud
  modem Dialin
  modem autoconfigure discovery
  transport input all
  autoselect ppp
  stopbits 1
  flowcontrol hardware
 line 34 64
 line aux 0
 line vty 0 4
  password cisco
 !
 ntp clock-period 17180257
 ntp server xxx.0.0.10
 !
 end
                                                                     
 -- 
 Козырев Вячеслав
 --- ifmail v.2.15.lk7.b7
  * Origin: -= sysadmins  =- (2:5004/53.4@fidonet)
 
 

Вернуться к списку тем, сортированных по: возрастание даты  уменьшение даты  тема  автор