Cisco AS5800 Specifications download pdf (Page 107)

3-25

Cisco AS5800 Operations, Administration, Maintenance, and Provisioning Guide

DOC-7810814=

Chapter 3 Operations

Configuring PPP and Authentication

Step 14 (Optional) To return to online mode and the router prompt, enter the ato command. After your enter this

command, however, the +++ escape sequence is still in the EXEC session’s input buffer. If you press

the carriage return (<CR>), you will receive an error about +++ being an unknown command.

To clear the input buffer, type Ctrl U after the ato command.

ato

% Unknown command or computer name, or unable to find computer address

5800-NAS>

Configuring PPP and Authentication

This section describes how to configure the Cisco AS5800 for PPP and local authentication.

The following sections are provided:

• Configuring PPP Authentication for Local AAA, page 3-25

• Configuring IPCP Options, page 3-26

• Configuring LCP Options, page 3-27

• Enabling PPP Autoselect, page 3-28

• Testing Asynchronous PPP Connections, page 3-29

• Inspecting Active Call States, page 3-34

• Confirming the Final Running Configuration, page 3-38

After local authentication is verified, use TACACS+ and a remote authentication server or RADIUS.

Configuring PPP Authentication for Local AAA

Configure AAA to perform log in authentication by using the local username database. The login

keyword authenticates EXEC terminal shell users. Additionally, configure PPP authentication to use the

local database if the session was not already authenticated by login.

Step 1 Create a local log in username database in global configuration mode. In this example, admin is used for

the administrator and the remote client’s login password is user.

username admin password adminpass

username theuser password theuserpass

Warning

This step also prevents you from getting locked out of the NAS. If you get locked out, you

must reboot the device and perform password recovery.

Step 2 Configure local AAA security in global configuration mode. You must enter the aaa new-model

command before the other two authentication commands.

aaa new-model

aaa authentication login default local

aaa authentication ppp default if-needed local

1 2 ... 102 103 104 105 106 107 108 109 110 111 112 ... 333 334

No comments

Cisco AS5800 Specifications Page 107