Guest

Dial-on-Demand Routing (DDR)

Accepting V.120 and PPP Incoming Calls Using AAA

Document ID: 9348



Contents

Introduction
Prerequisites
      Requirements
      Components Used
      Conventions
      Background Information
      Workaround
Configure
      Configurations
Verify
Troubleshoot
      Troubleshooting Commands
Related Information

Introduction

This document provides a sample configuration for accepting V.120 and PPP calls when using authentication, authorization, and accounting (AAA) to authenticate and authorize users on a Cisco AS5x00 platform.

Prerequisites

Requirements

There are no specific requirements for this document.

Components Used

The information in this document is based on the software and hardware versions below.

  • Cisco IOS Software Release 12.2(3).

Note: Please use Cisco IOS® Software Release 12.1(9), 12.2(2) or higher, in which the peer default ip add command is supported.

The information presented in this document was created from devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If you are working in a live network, ensure that you understand the potential impact of any command before using it.

Conventions

For more information on document conventions, see the Cisco Technical Tips Conventions.

Background Information

Each incoming V.120 call is forwarded to a VTY line and starts an Exec session. If you do not define a specific method, the default method is used. The router waits for the user to authenticate before starting a PPP session.

Note: If you have defined a default method for the authorization exec, authorization also starts.

To avoid this problem, add the following lines to your configuration:

aaa authentication login V.120 none 
aaa authorization exec V.120 none 
...
line vty x y
login authentication V.120
authorization exec V.120 
autocommand ppp negotiate
transport input V.120

Workaround

Add the following commands to the virtual-template: peer default ip add pool <dump_local_name> and ppp ipcp accept_address.

V.120 can be detected in the incoming ISDN setup message (through the bearer capability ) using the autodetect inside the High-Level Data Link Control (HDLC) controller.

You can force all incoming calls to be V.120 calls by using the isdn all-incoming-calls-V.120 command on the ISDN D-channel. This command can help when trying to reproduce a problem where the V.120 terminal adapter does not send the appropriate bearer capability.

Configure

In this section, you are presented with the information to configure the features described in this document.

Note: To find additional information on the commands used in this document, use the Command Lookup Tool (registered customers only) .

Configurations

This document uses the configuration shown below.

Monica

hostname monica
!    
aaa new-model    
aaa authentication login default group tacacs+ local
aaa authentication login V.120 none 

!--- To avoid authorization of initial exec session for V.120.

aaa authentication ppp default group tacacs+
aaa authorization exec V.120 none 

! --- If authorization exec is used.

aaa authorization network default group tacacs+
!
enable password <password>
username olive password 0 <password>
spe 1/0 1/9
firmware location bootflash:pw2910.bin
!
!
resource-pool disable
!
vty-async
vty-async virtual-template 1
isdn switch-type primary-net5!
interface Loopback0
ip address 4.1.1.1 255.255.255.255
!
interface Ethernet0
ip address dhcp
!
interface Virtual-Template1
ip unnumbered Loopback0
ip tcp header-compression passive
no peer default ip address 

! --- Please be aware of Cisco Bug ID CSCdt59455.

ppp authentication chap
!
interface Serial0
no ip address
shutdown 
no fair-queue
clockrate 2015232
!
interface Serial1
no ip address
shutdown
no fair-queue
clockrate 2015232
!
interface Serial2
no ip address
shutdown
no fair-queue
clockrate 2015232
!
interface Serial3
no ip address
shutdown
no fair-queue
clockrate 2015232
!
interface Serial0:15
ip unnumbered Ethernet0
encapsulation ppp
dialer rotary-group 2
autodetect encapsulation ppp V.120
isdn switch-type primary-net5
isdn incoming-voice modem
isdn T321 0
ppp authentication pap ISDN-noauthen
ppp multilink
!
interface FastEthernet0
no ip address
shutdown
duplex auto
speed auto
!
interface Group-Async0
ip unnumbered Ethernet0
encapsulation ppp
async mode interactive
peer default ip address pool isdn_pool 
ppp authentication pap
group-range 1 60
! 
interface Dialer2
ip unnumbered Ethernet0
encapsulation ppp
load-interval 30
dialer in-band
dialer-group 1
peer default ip address pool isdn_pool
ppp multilink
!
ip local pool isdn_pool 217.52.37.23 217.52.37.32
ip classless
no ip http server
!
dialer-list 1 protocol ip permit
tacacs-server host 10.200.20.133 key cisco
!
!
!
line con 0
exec-timeout 0 0
line 1 60
modem InOut
autoselect during-login
autoselect ppp
line aux 0
line vty 0 4
exec-timeout 0 0
password <password>
transport input telnet
line vty 5 39
transport input telnet
line vty 40 100
login authentication V.120
authorization exec V.120
autocommand ppp negotiate
transport input V.120
!
ntp clock-period 17180124
ntp server 10.200.20.134
end

Verify

There is currently no verification procedure available for this configuration.

Troubleshoot

This section provides information you can use to troubleshoot your configuration.

Troubleshooting Commands

Certain show commands are supported by the Output Interpreter Tool (registered customers only) , which allows you to view an analysis of show command output.

Note: Before issuing debug commands, please see Important Information on Debug Commands.

  • debug modem - Observes modem line activity on an access server.

  • debug tacacs - Displays information associated with the Terminal Access Controller Access Control System (TACACS).

  • debug aaa authentication - Displays information on AAA/Terminal Access Controller Access Control System Plus (TACACS+) authentication.

  • debug aaa authorization - Displays information on AAA/TACACS+ authorization.

  • debug v120 event - Displays information on V.120 activity.

  • debug ppp negotiation - Causes the debug ppp command to display PPP packets transmitted during PPP startup, where PPP options are negotiated.

  • debug isdn q931 - Displays information about call setup and teardown of ISDN network connections (Layer 3) between the local router (user side) and the network.

The debug output below was produced by entering these commands.

Note: In the following output, you can see that cloning fails and resets line by virtual exec.

General OS:
Modem control/process activation debugging is on
TACACS access control debugging is on
AAA Authentication debugging is on
AAA Authorization debugging is on
V.120:
V.120 events debugging is on
PPP:
PPP protocol negotiation debugging is on
ISDN:
ISDN Q931 packets debugging is on
ISDN Q931 packets debug DSLs. (On/Off/No DSL:1/0/-)
DSL 0 --> 7
1 - - - - - - - 
Nov 8 06:50:24.964: ISDN Se0:15: RX <- SETUP pd = 8 callref = 0x7351
Nov 8 06:50:24.964: Sending Complete
Nov 8 06:50:24.964: Bearer Capability i = 0x8890
Nov 8 06:50:24.964: Channel ID i = 0xA1838C
Nov 8 06:50:24.964: Calling Party Number i = 0xA1, '6080', Plan:ISDN,
Type:National
Nov 8 06:50:24.964: Called Party Number i = 0x81, '210', Plan:ISDN,
Type:Unknown
Nov 8 06:50:24.968: Locking Shift to Codeset 6
Nov 8 06:50:24.968: Codeset 6 IE 0x28 i = 'ISDN-EDU-1'
Nov 8 06:50:24.968: AAA/ACCT/DS0: channel=11, ds1=0, t3=0, slot=0, ds0=11
Nov 8 06:50:24.972: AAA/ACCT/DS0: channel=11, ds1=0, t3=0, slot=0, ds0=11
Nov 8 06:50:24.972: AAA/ACCT/DS0: channel=11, ds1=0, t3=0, slot=0, ds0=11
Nov 8 06:50:24.972: %LINK-3-UPDOWN: Interface Serial0:11, changed state to up
Nov 8 06:50:24.972: ISDN Se0:15: TX -> CALL_PROC pd = 8 callref = 0xF351
Nov 8 06:50:24.976: Channel ID i = 0xA9838C
Nov 8 06:50:24.976: ISDN Se0:15: TX -> CONNECT pd = 8 callref = 0xF351
Nov 8 06:50:24.976: Channel ID i = 0xA9838C
Nov 8 06:50:25.024: ISDN Se0:15: RX <- CONNECT_ACK pd = 8 callref = 0x7351
Nov 8 06:50:25.024: ISDN Se0:15: CALL_PROGRESS: CALL_CONNECTED call id 0xAE,
bchan 11, dsl 0
Nov 8 06:50:25.060: V.120: Autodetect trying to detect V.120 mode on Se0:11
Nov 8 06:50:25.060: V.120 sampled pkt: 3 bytes: 8 1 7F
Nov 8 06:50:25.064: Se0:11-V.120 started - Setting default V.120 parameters
Nov 8 06:50:25.064: TTY102: EXEC creation
Nov 8 06:50:25.064: AAA: parse name=tty102 idb type=13 tty=-1
Nov 8 06:50:25.064: AAA: name=tty102 flags=0x11 type=5 shelf=0 slot=0 adapter=0
port=102 channel=0
Nov 8 06:50:25.064: AAA: parse name=Serial0:11 idb type=13 tty=-1
Nov 8 06:50:25.064: AAA: name=Serial0:11 flags=0x51 type=1 shelf=0 slot=0
adapter=0 port=0 channel=11
Nov 8 06:50:25.064: AAA/ACCT/DS0: channel=11, ds1=0, t3=0, slot=0, ds0=11
Nov 8 06:50:25.064: AAA/MEMORY: create_user (0x6205CD3C) user='NULL' ruser='NULL'
port='tty102' rem_addr='6080/210' authen_type=ASCII service=LOGIN priv=1
initial_task_id='0'
Nov 8 06:50:25.064: AAA/AUTHEN/START (2943985846): port='tty102' list='V.120'
action=LOGIN service=LOGIN
Nov 8 06:50:25.064: AAA/AUTHEN/START (2943985846): found list V.120
Nov 8 06:50:25.064: AAA/AUTHEN/START (2943985846): Method=NONE
Nov 8 06:50:25.064: AAA/AUTHEN (2943985846): status = PASS
Nov 8 06:50:25.064: TTY102: create timer type 1, 600 seconds
Nov 8 06:50:25.112: Vi1 PPP: Phase is DOWN, Setup [0 sess, 0 load]
Nov 8 06:50:25.136: V.120extablished handle = 0
Nov 8 06:50:25.140: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state    
to up
Nov 8 06:50:25.140: Vi1 PPP: Treating connection as a dedicated line
Nov 8 06:50:25.140: Vi1 PPP: Phase is ESTABLISHING, Active Open [0 sess, 0 load]
Nov 8 06:50:25.140: Vi1 AAA/AUTHOR/FSM: (0): LCP succeeds trivially
Nov 8 06:50:25.140: Vi1 LCP: O CONFREQ [Closed] id 1 len 25
Nov 8 06:50:25.140: Vi1 LCP: ACCM 0x000A0000 (0x0206000A0000)
Nov 8 06:50:25.140: Vi1 LCP: AuthProto CHAP (0x0305C22305)
Nov 8 06:50:25.140: Vi1 LCP: MagicNumber 0x19ADD6C8 (0x050619ADD6C8)
Nov 8 06:50:25.140: Vi1 LCP: PFC (0x0702)
Nov 8 06:50:25.140: Vi1 LCP: ACFC (0x0802)
Nov 8 06:50:25.640: TTY102: destroy timer type 1
Nov 8 06:50:25.640: TTY102: no timer type 0 to destroy
Nov 8 06:50:25.676: Vi1 LCP: I CONFACK [REQsent] id 1 len 25
Nov 8 06:50:25.676: Vi1 LCP: ACCM 0x000A0000 (0x0206000A0000)
Nov 8 06:50:25.676: Vi1 LCP: AuthProto CHAP (0x0305C22305)
Nov 8 06:50:25.676: Vi1 LCP: MagicNumber 0x19ADD6C8 (0x050619ADD6C8)
Nov 8 06:50:25.676: Vi1 LCP: PFC (0x0702)
Nov 8 06:50:25.676: Vi1 LCP: ACFC (0x0802)
Nov 8 06:50:26.136: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0:11,
changed state to up
Nov 8 06:50:27.140: Vi1 LCP: TIMEout: State ACKrcvd
Nov 8 06:50:27.140: Vi1 LCP: O CONFREQ [ACKrcvd] id 2 len 25
Nov 8 06:50:27.140: Vi1 LCP: ACCM 0x000A0000 (0x0206000A0000)
Nov 8 06:50:27.140: Vi1 LCP: AuthProto CHAP (0x0305C22305)
Nov 8 06:50:27.140: Vi1 LCP: MagicNumber 0x19ADD6C8 (0x050619ADD6C8)
Nov 8 06:50:27.140: Vi1 LCP: PFC (0x0702)
Nov 8 06:50:27.140: Vi1 LCP: ACFC (0x0802)
Nov 8 06:50:27.176: Vi1 LCP: I CONFACK [REQsent] id 2 len 25
Nov 8 06:50:27.176: Vi1 LCP: ACCM 0x000A0000 (0x0206000A0000)
Nov 8 06:50:27.176: Vi1 LCP: AuthProto CHAP (0x0305C22305)
Nov 8 06:50:27.176: Vi1 LCP: MagicNumber 0x19ADD6C8 (0x050619ADD6C8)
Nov 8 06:50:27.176: Vi1 LCP: PFC (0x0702)
Nov 8 06:50:27.176: Vi1 LCP: ACFC (0x0802)
Nov 8 06:50:28.096: Vi1 LCP: I CONFREQ [ACKrcvd] id 2 len 23
Nov 8 06:50:28.096: Vi1 LCP: ACCM 0x000A0000 (0x0206000A0000)
Nov 8 06:50:28.096: Vi1 LCP: MagicNumber 0x03B6B22B (0x050603B6B22B)
Nov 8 06:50:28.096: Vi1 LCP: PFC (0x0702)
Nov 8 06:50:28.096: Vi1 LCP: ACFC (0x0802)
Nov 8 06:50:28.096: Vi1 LCP: Callback 6 (0x0D0306)
Nov 8 06:50:28.096: Vi1 LCP: O CONFREJ [ACKrcvd] id 2 len 7
Nov 8 06:50:28.096: Vi1 LCP: Callback 6 (0x0D0306)
Nov 8 06:50:28.124: Vi1 LCP: I CONFREQ [ACKrcvd] id 3 len 20
Nov 8 06:50:28.124: Vi1 LCP: ACCM 0x000A0000 (0x0206000A0000)
Nov 8 06:50:28.128: Vi1 LCP: MagicNumber 0x03B6B22B (0x050603B6B22B)
Nov 8 06:50:28.128: Vi1 LCP: PFC (0x0702)
Nov 8 06:50:28.128: Vi1 LCP: ACFC (0x0802)
Nov 8 06:50:28.128: Vi1 LCP: O CONFACK [ACKrcvd] id 3 len 20
Nov 8 06:50:28.128: Vi1 LCP: ACCM 0x000A0000 (0x0206000A0000)
Nov 8 06:50:28.128: Vi1 LCP: MagicNumber 0x03B6B22B (0x050603B6B22B)
Nov 8 06:50:28.128: Vi1 LCP: PFC (0x0702)
Nov 8 06:50:28.128: Vi1 LCP: ACFC (0x0802)
Nov 8 06:50:28.128: Vi1 LCP: State is Open
Nov 8 06:50:28.128: Vi1 PPP: Phase is AUTHENTICATING, by this end [0 sess, 0
load]
Nov 8 06:50:28.128: Vi1 CHAP: O CHALLENGE id 6 len 27 from "monica"
Nov 8 06:50:28.164: Vi1 CHAP: I RESPONSE id 6 len 26 from "olive"
Nov 8 06:50:28.168: AAA: parse name=Virtual-Access1 idb type=21 tty=102
Nov 8 06:50:28.168: AAA: name=Virtual-Access1 flags=0x11 type=5 shelf=0 slot=0
adapter=0 port=1 channel=0
Nov 8 06:50:28.168: AAA: parse name=Serial0:11 idb type=13 tty=-1
Nov 8 06:50:28.168: AAA: name=Serial0:11 flags=0x51 type=1 shelf=0 slot=0
adapter=0 port=0 channel=11
Nov 8 06:50:28.168: AAA/ACCT/DS0: channel=11, ds1=0, t3=0, slot=0, ds0=11
Nov 8 06:50:28.168: AAA/MEMORY: create_user (0x6205C97C) user='olive'
ruser='NULL' port='Virtual-Access1' rem_addr='6080/210' authen_type=CHAP
service=PPP priv=1 initial_task_id='0'
Nov 8 06:50:28.168: AAA/AUTHEN/START (3173770425): port='Virtual-Access1' list=''
action=LOGIN service=PPP
Nov 8 06:50:28.168: AAA/AUTHEN/START (3173770425): using "default"    list
Nov 8 06:50:28.168: AAA/AUTHEN/START (3173770425): Method=tacacs+ (tacacs+)
Nov 8 06:50:28.168: TAC+: send AUTHEN/START packet ver=193 id=3173770425
Nov 8 06:50:28.168: TAC+: Using default tacacs server-group "tacacs+"    list.
Nov 8 06:50:28.168: TAC+: Opening TCP/IP to 10.200.20.133/49 timeout=5
Nov 8 06:50:28.172: TAC+: Opened TCP/IP handle 0x6205CEDC to 10.200.20.133/49
Nov 8 06:50:28.172: TAC+: 10.200.20.133 (3173770425) AUTHEN/START/LOGIN/CHAP
queued
Nov 8 06:50:28.372: TAC+: (3173770425) AUTHEN/START/LOGIN/CHAP processed
Nov 8 06:50:28.372: TAC+: ver=193 id=3173770425 received AUTHEN status = PASS
Nov 8 06:50:28.372: AAA/AUTHEN (3173770425): status = PASS
Nov 8 06:50:28.372: TAC+: Closing TCP/IP 0x6205CEDC connection to
10.200.20.133/49
Nov 8 06:50:28.372: Vi1 AAA/AUTHOR/LCP: Authorize LCP
Nov 8 06:50:28.372: Vi1 AAA/AUTHOR/LCP (2695753846): Port='Virtual-Access1'
list='' service=NET
Nov 8 06:50:28.372: AAA/AUTHOR/LCP: Vi1 (2695753846) user='olive'
Nov 8 06:50:28.372: Vi1 AAA/AUTHOR/LCP (2695753846): send AV service=ppp
Nov 8 06:50:28.372: Vi1 AAA/AUTHOR/LCP (2695753846): send AV protocol=lcp
Nov 8 06:50:28.372: Vi1 AAA/AUTHOR/LCP (2695753846): found list "default"
Nov 8 06:50:28.372: Vi1 AAA/AUTHOR/LCP (2695753846): Method=tacacs+ (tacacs+)
Nov 8 06:50:28.372: AAA/AUTHOR/TAC+: (2695753846): user=olive
Nov 8 06:50:28.372: AAA/AUTHOR/TAC+: (2695753846): send AV service=ppp
Nov 8 06:50:28.372: AAA/AUTHOR/TAC+: (2695753846): send AV protocol=lcp
Nov 8 06:50:28.372: TAC+: using previously set server 10.200.20.133 from group
tacacs+
Nov 8 06:50:28.372: TAC+: Opening TCP/IP to 10.200.20.133/49 timeout=5
Nov 8 06:50:28.376: TAC+: Opened TCP/IP handle 0x6205DF0C to 10.200.20.133/49
Nov 8 06:50:28.376: TAC+: Opened 10.200.20.133 index=1
Nov 8 06:50:28.376: TAC+: 10.200.20.133 (2695753846) AUTHOR/START queued
Nov 8 06:50:28.576: TAC+: (2695753846) AUTHOR/START processed
Nov 8 06:50:28.576: TAC+: (2695753846): received author response status =
PASS_ADD
Nov 8 06:50:28.576: TAC+: Closing TCP/IP 0x6205DF0C connection to
10.200.20.133/49
Nov 8 06:50:28.576: Vi1 AAA/AUTHOR (2695753846): Post authorization status =
PASS_ADD
Nov 8 06:50:28.576: AAA/MEMORY: free_user (0x6205CD3C) user='NULL' ruser='NULL'
port='tty102' rem_addr='6080/210' authen_type=ASCII service=LOGIN priv=1
Nov 8 06:50:28.576: Vi1 CHAP: O SUCCESS id 6 len 4
Nov 8 06:50:28.576: Vi1 PPP: Phase is UP [0 sess, 0 load]
Nov 8 06:50:28.576: Vi1 AAA/AUTHOR/FSM: (0): Can we start IPCP?
Nov 8 06:50:28.576: Vi1 AAA/AUTHOR/FSM (1382427768): Port='Virtual-Access1'
list='' service=NET
Nov 8 06:50:28.576: AAA/AUTHOR/FSM: Vi1 (1382427768) user='olive'
Nov 8 06:50:28.576: Vi1 AAA/AUTHOR/FSM (1382427768): send AV service=ppp
Nov 8 06:50:28.576: Vi1 AAA/AUTHOR/FSM (1382427768): send AV protocol=ip
Nov 8 06:50:28.576: Vi1 AAA/AUTHOR/FSM (1382427768): found list "default"
Nov 8 06:50:28.576: Vi1 AAA/AUTHOR/FSM (1382427768): Method=tacacs+ (tacacs+)
Nov 8 06:50:28.576: AAA/AUTHOR/TAC+: (1382427768): user=olive
Nov 8 06:50:28.576: AAA/AUTHOR/TAC+: (1382427768): send AV service=ppp
Nov 8 06:50:28.576: AAA/AUTHOR/TAC+: (1382427768): send AV protocol=ip
Nov 8 06:50:28.576: TAC+: using previously set server 10.200.20.133 from group
tacacs+
Nov 8 06:50:28.576: TAC+: Opening TCP/IP to 10.200.20.133/49 timeout=5
Nov 8 06:50:28.580: TAC+: Opened TCP/IP handle 0x622C4158 to 10.200.20.133/49
Nov 8 06:50:28.580: TAC+: Opened 10.200.20.133 index=1
Nov 8 06:50:28.580: TAC+: 10.200.20.133 (1382427768) AUTHOR/START queued
Nov 8 06:50:28.608: Vi1 IPCP: I CONFREQ [Closed] id 1 len 40
Nov 8 06:50:28.608: Vi1 IPCP: CompressType VJ 15 slots CompressSlotID
(0x0206002D0F01)
Nov 8 06:50:28.608: Vi1 IPCP: Address 10.10.10.1 (0x03060A0A0A01)
Nov 8 06:50:28.608: Vi1 IPCP: PrimaryDNS 0.0.0.0 (0x810600000000)
Nov 8 06:50:28.608: Vi1 IPCP: PrimaryWINS 0.0.0.0 (0x820600000000)
Nov 8 06:50:28.608: Vi1 IPCP: SecondaryDNS 0.0.0.0 (0x830600000000)
Nov 8 06:50:28.608: Vi1 IPCP: SecondaryWINS 0.0.0.0 (0x840600000000)
Nov 8 06:50:28.612: Vi1 CCP: I CONFREQ [Closed] id 1 len 15
Nov 8 06:50:28.612: Vi1 CCP: MS-PPC supported bits 0x00000001 (0x120600000001)
Nov 8 06:50:28.612: Vi1 CCP: Stacker history 1 check mode EXTENDED
(0x1105000104)
Nov 8 06:50:28.612: Vi1 LCP: O PROTREJ [Open] id 3 len 21 protocol CCP
Nov 8 06:50:28.612: Vi1 LCP: (0x80FD0101000F12060000000111050001)
Nov 8 06:50:28.612: Vi1 LCP: (0x04)
Nov 8 06:50:28.780: TAC+: (1382427768) AUTHOR/START processed
Nov 8 06:50:28.780: TAC+: (1382427768): received author response status =
PASS_ADD
Nov 8 06:50:28.780: TAC+: Closing TCP/IP 0x622C4158 connection to
10.200.20.133/49
Nov 8 06:50:28.780: Vi1 AAA/AUTHOR (1382427768): Post authorization status =
PASS_ADD
Nov 8 06:50:28.780: Vi1 AAA/AUTHOR/FSM: We can start IPCP
Nov 8 06:50:28.780: Vi1 IPCP: O CONFREQ [Closed] id 1 len 16
Nov 8 06:50:28.780: Vi1 IPCP: CompressType VJ 15 slots (0x0206002D0F00)
Nov 8 06:50:28.780: Vi1 IPCP: Address 4.1.1.1 (0x030604010101)
Nov 8 06:50:28.780: Vi1 AAA/AUTHOR/FSM: (0): Can we start CDPCP?
Nov 8 06:50:28.780: Vi1 AAA/AUTHOR/FSM (1811637780): Port='Virtual-Access1'
list='' service=NET
Nov 8 06:50:28.780: AAA/AUTHOR/FSM: Vi1 (1811637780) user='olive'
Nov 8 06:50:28.780: Vi1 AAA/AUTHOR/FSM (1811637780): send AV service=ppp
Nov 8 06:50:28.780: Vi1 AAA/AUTHOR/FSM (1811637780): send AV protocol=cdp
Nov 8 06:50:28.780: Vi1 AAA/AUTHOR/FSM (1811637780): found list "default"
Nov 8 06:50:28.780: Vi1 AAA/AUTHOR/FSM (1811637780): Method=tacacs+ (tacacs+)
Nov 8 06:50:28.780: AAA/AUTHOR/TAC+: (1811637780): user=olive
Nov 8 06:50:28.780: AAA/AUTHOR/TAC+: (1811637780): send AV service=ppp
Nov 8 06:50:28.780: AAA/AUTHOR/TAC+: (1811637780): send AV protocol=cdp
Nov 8 06:50:28.780: TAC+: using previously set server 10.200.20.133 from group
tacacs+
Nov 8 06:50:28.780: TAC+: Opening TCP/IP to 10.200.20.133/49 timeout=5
Nov 8 06:50:28.784: TAC+: Opened TCP/IP handle 0x622C45F4 to 10.200.20.133/49
Nov 8 06:50:28.784: TAC+: Opened 10.200.20.133 index=1
Nov 8 06:50:28.784: TAC+: 10.200.20.133 (1811637780) AUTHOR/START queued
Nov 8 06:50:28.804: Vi1 IPCP: I CONFACK [REQsent] id 1 len 16
Nov 8 06:50:28.804: Vi1 IPCP: CompressType VJ 15 slots (0x0206002D0F00)
Nov 8 06:50:28.804: Vi1 IPCP: Address 4.1.1.1 (0x030604010101)
Nov 8 06:50:28.984: TAC+: (1811637780) AUTHOR/START processed
Nov 8 06:50:28.984: TAC+: (1811637780): received author response status = FAIL
Nov 8 06:50:28.984: TAC+: Closing TCP/IP 0x622C45F4 connection to
10.200.20.133/49
Nov 8 06:50:28.984: Vi1 AAA/AUTHOR (1811637780): Post authorization status = FAIL
Nov 8 06:50:28.984: Vi1 AAA/AUTHOR/FSM: We cannot start CDPCP
Nov 8 06:50:28.984: Vi1 CDPCP: State is Closed
Nov 8 06:50:29.576: %LINEPROTO-5-UPDOWN: Line protocol on Interface
Virtual-Access1, changed state to up
Nov 8 06:50:29.580: Vi1 PPP: Outbound cdp packet dropped, CDPCP is Closed
 [starting negotiations]
Nov 8 06:50:29.580: Vi1 CDPCP: State is Closed
Nov 8 06:50:29.584: Vi1 PPP: Outbound cdp packet dropped, CDPCP is Closed
[starting negotiations]
Nov 8 06:50:29.584: Vi1 CDPCP: State is Closed
Nov 8 06:50:29.588: Vi1 PPP: Outbound cdp packet dropped, CDPCP is Closed
[starting negotiations]
Nov 8 06:50:29.588: Vi1 CDPCP: State is Closed
Nov 8 06:50:29.592: Vi1 CDPCP: TIMEout: State Closed
Nov 8 06:50:29.592: Vi1 CDPCP: State is Listen
Nov 8 06:50:30.780: Vi1 IPCP: TIMEout: State ACKrcvd
Nov 8 06:50:30.780: Vi1 IPCP: O CONFREQ [ACKrcvd] id 2 len 16
Nov 8 06:50:30.780: Vi1 IPCP: CompressType VJ 15 slots (0x0206002D0F00)
Nov 8 06:50:30.780: Vi1 IPCP: Address 4.1.1.1 (0x030604010101)
Nov 8 06:50:30.800: Vi1 IPCP: I CONFACK [REQsent] id 2 len 16
Nov 8 06:50:30.800: Vi1 IPCP: CompressType VJ 15 slots (0x0206002D0F00)
Nov 8 06:50:30.804: Vi1 IPCP: Address 4.1.1.1 (0x030604010101)
Nov 8 06:50:30.972: %ISDN-6-CONNECT: Interface Serial0:11 is now connected to
6080 
Nov 8 06:50:31.600: Vi1 IPCP: I CONFREQ [ACKrcvd] id 2 len 40
Nov 8 06:50:31.600: Vi1 IPCP: CompressType VJ 15 slots CompressSlotID
(0x0206002D0F01)
Nov 8 06:50:31.600: Vi1 IPCP: Address 10.10.10.1 (0x03060A0A0A01)
Nov 8 06:50:31.600: Vi1 IPCP: PrimaryDNS 0.0.0.0 (0x810600000000)
Nov 8 06:50:31.600: Vi1 IPCP: PrimaryWINS 0.0.0.0 (0x820600000000)
Nov 8 06:50:31.600: Vi1 IPCP: SecondaryDNS 0.0.0.0 (0x830600000000)
Nov 8 06:50:31.600: Vi1 IPCP: SecondaryWINS 0.0.0.0 (0x840600000000)
Nov 8 06:50:31.600: Vi1 AAA/AUTHOR/IPCP: Start. Her address 10.10.10.1, we want
0.0.0.0
Nov 8 06:50:31.600: Vi1 AAA/AUTHOR/IPCP (2414739179): Port='Virtual-Access1'
list='' service=NET
Nov 8 06:50:31.600: AAA/AUTHOR/IPCP: Vi1 (2414739179) user='olive'
Nov 8 06:50:31.600: Vi1 AAA/AUTHOR/IPCP (2414739179): send AV service=ppp
Nov 8 06:50:31.600: Vi1 AAA/AUTHOR/IPCP (2414739179): send AV protocol=ip
Nov 8 06:50:31.600: Vi1 AAA/AUTHOR/IPCP (2414739179): send AV addr*10.10.10.1
Nov 8 06:50:31.600: Vi1 AAA/AUTHOR/IPCP (2414739179): found list "default"
Nov 8 06:50:31.600: Vi1 AAA/AUTHOR/IPCP (2414739179): Method=tacacs+ (tacacs+)
Nov 8 06:50:31.600: AAA/AUTHOR/TAC+: (2414739179): user=olive
Nov 8 06:50:31.600: AAA/AUTHOR/TAC+: (2414739179): send AV service=ppp
Nov 8 06:50:31.604: AAA/AUTHOR/TAC+: (2414739179): send AV protocol=ip
Nov 8 06:50:31.604: AAA/AUTHOR/TAC+: (2414739179): send AV addr*10.10.10.1
Nov 8 06:50:31.604: TAC+: using previously set server 10.200.20.133 from group
tacacs+
Nov 8 06:50:31.604: TAC+: Opening TCP/IP to 10.200.20.133/49 timeout=5
Nov 8 06:50:31.604: TAC+: Opened TCP/IP handle 0x622C6CB8 to 10.200.20.133/49
Nov 8 06:50:31.604: TAC+: Opened 10.200.20.133 index=1
Nov 8 06:50:31.604: TAC+: 10.200.20.133 (2414739179) AUTHOR/START queued
Nov 8 06:50:31.804: TAC+: (2414739179) AUTHOR/START processed
Nov 8 06:50:31.804: TAC+: (2414739179): received author response status =
PASS_ADD
Nov 8 06:50:31.804: TAC+: Closing TCP/IP 0x622C6CB8 connection to
10.200.20.133/49
Nov 8 06:50:31.804: Vi1 AAA/AUTHOR (2414739179): Post authorization status =
PASS_ADD
Nov 8 06:50:31.804: Vi1 AAA/AUTHOR/IPCP: Processing AV service=ppp
Nov 8 06:50:31.804: Vi1 AAA/AUTHOR/IPCP: Processing AV protocol=ip
Nov 8 06:50:31.804: Vi1 AAA/AUTHOR/IPCP: Processing AV addr*10.10.10.1
Nov 8 06:50:31.804: Vi1 AAA/AUTHOR/IPCP: Authorization succeeded
Nov 8 06:50:31.804: Vi1 AAA/AUTHOR/IPCP: Done. Her address 10.10.10.1, we want
10.10.10.1
Nov 8 06:50:31.804: Vi1 IPCP: O CONFREJ [ACKrcvd] id 2 len 22
Nov 8 06:50:31.804: Vi1 IPCP: PrimaryWINS 0.0.0.0 (0x820600000000)
Nov 8 06:50:31.804: Vi1 IPCP: SecondaryDNS 0.0.0.0 (0x830600000000)
Nov 8 06:50:31.804: Vi1 IPCP: SecondaryWINS 0.0.0.0 (0x840600000000)
Nov 8 06:50:31.832: Vi1 IPCP: I CONFREQ [ACKrcvd] id 3 len 22
Nov 8 06:50:31.832: Vi1 IPCP: CompressType VJ 15 slots CompressSlotID
(0x0206002D0F01)
Nov 8 06:50:31.832: Vi1 IPCP: Address 10.10.10.1 (0x03060A0A0A01)
Nov 8 06:50:31.832: Vi1 IPCP: PrimaryDNS 0.0.0.0 (0x810600000000)
Nov 8 06:50:31.832: Vi1 AAA/AUTHOR/IPCP: Start. Her address 10.10.10.1, we want
10.10.10.1
Nov 8 06:50:31.832: Vi1 AAA/AUTHOR/IPCP: Processing AV service=ppp
Nov 8 06:50:31.832: Vi1 AAA/AUTHOR/IPCP: Processing AV protocol=ip
Nov 8 06:50:31.832: Vi1 AAA/AUTHOR/IPCP: Processing AV addr*10.10.10.1
Nov 8 06:50:31.832: Vi1 AAA/AUTHOR/IPCP: Authorization succeeded
Nov 8 06:50:31.832: Vi1 AAA/AUTHOR/IPCP: Done. Her address 10.10.10.1, we want
10.10.10.1
Nov 8 06:50:31.832: Vi1 IPCP: O CONFNAK [ACKrcvd] id 3 len 10
Nov 8 06:50:31.832: Vi1 IPCP: PrimaryDNS 10.200.20.134 (0x81060AC81486)
Nov 8 06:50:31.856: Vi1 IPCP: I CONFREQ [ACKrcvd] id 4 len 22
Nov 8 06:50:31.856: Vi1 IPCP: CompressType VJ 15 slots CompressSlotID
(0x0206002D0F01)
Nov 8 06:50:31.856: Vi1 IPCP: Address 10.10.10.1 (0x03060A0A0A01)
Nov 8 06:50:31.856: Vi1 IPCP: PrimaryDNS 10.200.20.134 (0x81060AC81486)
Nov 8 06:50:31.856: Vi1 AAA/AUTHOR/IPCP: Start. Her address 10.10.10.1, we want
10.10.10.1
Nov 8 06:50:31.856: Vi1 AAA/AUTHOR/IPCP: Processing AV service=ppp
Nov 8 06:50:31.856: Vi1 AAA/AUTHOR/IPCP: Processing AV protocol=ip
Nov 8 06:50:31.856: Vi1 AAA/AUTHOR/IPCP: Processing AV addr*10.10.10.1
Nov 8 06:50:31.856: Vi1 AAA/AUTHOR/IPCP: Authorization succeeded
Nov 8 06:50:31.856: Vi1 AAA/AUTHOR/IPCP: Done. Her address 10.10.10.1, we want
10.10.10.1
Nov 8 06:50:31.856: Vi1 IPCP: O CONFACK [ACKrcvd] id 4 len 22
Nov 8 06:50:31.856: Vi1 IPCP: CompressType VJ 15 slots CompressSlotID
(0x0206002D0F01)
Nov 8 06:50:31.856: Vi1 IPCP: Address 10.10.10.1 (0x03060A0A0A01)
Nov 8 06:50:31.856: Vi1 IPCP: PrimaryDNS 10.200.20.134 (0x81060AC81486)
Nov 8 06:50:31.856: Vi1 IPCP: State is Open
Nov 8 06:50:31.860: Vi1 IPCP: Install route to 10.10.10.1

Related Information



Updated: Nov 15, 2007 Document ID: 9348