Terminal Server configuration for Radius AAA
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Router
!
aaa new-model
aaa authentication login default radius local none
aaa authentication login admin radius local none
aaa authentication login no_radius local
aaa authentication ppp default radius
aaa authorization exec default radius if-authenticated
aaa authorization network default radius
aaa accounting exec default start-stop radius
aaa accounting network default start-stop radius
aaa accounting system default start-stop radius
enable secret password ceenet
enable password ceenet1
!
username admin password 0 admin
ip subnet-zero
ip routing
!
modemcap entry v90:FD=&f2:MSC=s0=1
!
!
interface Ethernet0/0
ip address 10.0.1.10 255.255.248.0
no ip directed-broadcast
no ip mroute-cache
!
interface Serial0/0
no ip address
no ip directed-broadcast
no ip mroute-cache
shutdown
!
interface Group-Async1
ip unnumbered Ethernet0/0
no ip directed-broadcast
encapsulation ppp
async dynamic address
async mode interactive
peer default ip address pool async
ppp authentication pap chap
group-range 33 48
!
ip local pool async 10.0.11.1 10.0.11.254
ip classless
no ip http server
!
radius-server host 10.0.1.2 auth-port 1812 acct-port 1813
radius-server key secret
!
line con 0
login authentication no_radius
transport input none
line 33 48
autoselect during-login
autoselect ppp
modem Dialin
modem autoconfigure type v90
transport input all
autohangup
speed 115200
flowcontrol hardware
line aux 0
line vty 0 4
password ceenet2
!
end
Debug commands useful during the RADIUS Lab
a) AAA Authentification and Authorization debug
router# debug aaa authentication
router# debug aaa authorization
b) PPP negociation and authenticaton
router# debug ppp negociation
router# debug ppp authentication
c) RADIUS Debug mode
router# debug radius