Re: [RadiusNT] Help with Radius NT and CISCO routers

( dan@dmn.com.au )
Wed, 23 Dec 1998 19:22:43 +0800

This is a multi-part message in MIME format.

------=_NextPart_000_0116_01BE2EA9.9D60A560
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

This is for CISCO 5200

-----Original Message-----
From: Rob Smorfitt <administrator@futurenet.co.za>
To: radiusnt@iea-software.com <radiusnt@iea-software.com>
Date: Wednesday, December 23, 1998 12:27 PM
Subject: [RadiusNT] Help with Radius NT and CISCO routers

>Can someone help me as I am getting real desperate.
>
>We have just purchased a wad of Cisco 2511 and 5260 access routers.
>
>We cannot get them to authenticate.
>
>Can someone please provide me with a sample configuration.?
>
>It appears to interrogate the radius .mdb file but appears to not receive
>any data back and it keeps trying until the retry count is reached.
>
>Pleeeeeeze help?
>
>
>
>
>
>Rob Smorfitt
>+27 331 428870
>P O Box 1412,Pietermaritzburg,3200
>www.futurenet.co.za
>
>
>For more information about this list, including removal, please
>see this URL: http://www.iea-software.com/maillist.html
>

------=_NextPart_000_0116_01BE2EA9.9D60A560
Content-Type: text/plain;
name="CISCO5200.txt"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
filename="CISCO5200.txt"

Current configuration:
!
version 11.3
no service password-encryption
!
hostname Neelix
!
aaa new-model
aaa authentication login default radius
aaa authentication login no_tacacs enable
aaa authentication ppp default radius
aaa accounting exec start-stop radius
aaa accounting network start-stop radius
enable secret 5 $1$HVbF$0aj9jGk6fpsFCozVxa29x/
enable password away
!
modem a-law
no modem fast-answer
modem country mica australia
ip domain-name dmn.com.au
ip name-server 203.62.199.2
ip address-pool local

isdn switch-type primary-net5
!
!
controller E1 0
framing CRC4 Australia
clock source line primary
pri-group timeslots 1-31
!
controller E1 1
framing CRC4 Australia
clock source line secondary
pri-group timeslots 1-31
!
interface Ethernet0
ip address 203.62.199.129 255.255.255.128
!
interface Serial0
ip unnumbered Ethernet0
no ip mroute-cache
no fair-queue
!
interface Serial1
no ip address
shutdown
!
interface Serial0:15
no ip address
no ip mroute-cache
no keepalive
dialer load-threshold 1 either
dialer-group 1
isdn incoming-voice modem
no fair-queue
no cdp enable
!
interface Serial1:15
no ip address
no ip mroute-cache
no keepalive
dialer load-threshold 1 either
dialer-group 1
isdn incoming-voice modem
no fair-queue
no cdp enable
!
interface Group-Async1
no ip address
shutdown
!
interface Serial0:15
no ip address
no ip mroute-cache
no keepalive
dialer load-threshold 1 either
dialer-group 1
isdn incoming-voice modem
no fair-queue
no cdp enable
!
interface Serial1:15
no ip address
no ip mroute-cache
no keepalive
dialer load-threshold 1 either
dialer-group 1
isdn incoming-voice modem
no fair-queue
no cdp enable
!
interface Group-Async1
ip unnumbered Ethernet0
ip tcp header-compression passive
encapsulation ppp
no ip route-cache
no ip mroute-cache
async mode interactive
ppp authentication pap chap
group-range 1 60
!
ip local pool default 203.62.199.130 203.62.199.189
ip classless
ip route 0.0.0.0 0.0.0.0 203.30.19.22
ip route 203.30.19.22 255.255.255.255 Serial0
ip route 203.62.199.0 255.255.255.0 203.62.199.250
access-list 101 permit tcp host 203.26.212.13 any eq www
access-list 101 permit tcp host 203.62.199.251 any eq www
access-list 101 permit tcp host 203.62.199.11 any eq www
access-list 101 deny tcp any any eq www
access-list 101 permit ip any any
dialer-list 1 protocol ip permit
snmp-server community una RO
radius-server host 203.62.199.12 auth-port 1645 acct-port 1646
radius-server key ILoveU =20
!
line con 0
logging synchronous
login authentication no_tacacs
line 1 60
autoselect during-login
autoselect ppp
modem Dialin
transport input all
line aux 0
line vty 0 4
login authentication no_tacacs
!
scheduler interval 1000
end
=

------=_NextPart_000_0116_01BE2EA9.9D60A560--