Cisco Catalyst 2960 Series, Configuration Manual

Page: 1023 / 2288

Troubleshooting Tips for RADIUS Progress Codes
The following example is a sample debug output from the debug ppp negotiation command. This debug
output is used to verify that accounting “ stop ” records have been generated and that attribute 196
(Ascend-Connect-Progress) has a value of 65.
Tue Aug 7 06:21:03 2001
NAS-IP-Address = 10.0.58.62
NAS-Port = 20018
Vendor-Specific = ""
NAS-Port-Type = ISDN
User-Name = "peer_16a"
Called-Station-Id = "5213124"
Calling-Station-Id = "5212175"
Acct-Status-Type = Stop
Acct-Authentic = RADIUS
Service-Type = Framed-User
Acct-Session-Id = "00000014"
Framed-Protocol = PPP
Framed-IP-Address = 172.16.0.2
Acct-Input-Octets = 3180
Acct-Output-Octets = 3186
Acct-Input-Packets = 40
Acct-Output-Packets = 40
Ascend-Connect-Pr = 65
Acct-Session-Time = 49
Acct-Delay-Time = 0
Timestamp = 997190463
Request-Authenticator = Unverified
Examples: Configuring the Switch to Use Vendor-Specific RADIUS Attributes
For example, this AV pair activates Cisco ’ s multiple named ip address pools feature during IP authorization
(during PPP IPCP address assignment):
cisco-avpair=
”
ip:addr-pool=first
“
This example shows how to provide a user logging in from a switch with immediate access to privileged
EXEC commands:
cisco-avpair=
”
shell:priv-lvl=15
“
This example shows how to specify an authorized VLAN in the RADIUS server database:
cisco-avpair=
”
tunnel-type(#64)=VLAN(13)
”
cisco-avpair=
”
tunnel-medium-type(#65)=802 media(6)
”
cisco-avpair=
”
tunnel-private-group-id(#81)=vlanid
”
This example shows how to apply an input ACL in ASCII format to an interface for the duration of this
connection:
cisco-avpair=
“
ip:inacl#1=deny ip 10.10.10.10 0.0.255.255 20.20.20.20 255.255.0.0
”
cisco-avpair=
“
ip:inacl#2=deny ip 10.10.10.10 0.0.255.255 any
”
cisco-avpair=
“
mac:inacl#3=deny any any decnet-iv
”
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
941
Configuration Examples for RADIUS