Configuring aaa pod server, Verifying aaa pod server – Cisco 10000 User Manual

Page 360

Advertising
background image

16-58

Cisco 10000 Series Router Software Configuration Guide

OL-2226-23

Chapter 16 Configuring RADIUS Features

RADIUS Packet of Disconnect

Configuring AAA POD Server

To configure the Calling-Station-ID format, perform the following task in global configuration mode:

Verifying AAA POD Server

To verify that the router is configured correctly to performs an AAA POD server, enter the
show running-configuration command in privileged EXEC mode to display the command settings for
the router.

Router# show running-configuration

!

aaa new-model

aaa authentication ppp default group radius

aaa authorization network default group radius

aaa accounting network default start-stop group radius

aaa pod server clients <ip address> port <port number> auth-type [all/ any/ session-key]

server-key cisco

Command

Purpose

Router(config)# aaa pod server clients [client ip

address] port [port-number] [auth-type {any| all|

session-key

}] [ignore {session-key | server-key}]

server-key

string

Enables inbound user sessions to be disconnected when specific

session attributes are presented.

client ip-address(Optional) Registers the IP address of all the

clients who can send POD requests. If not set, it can receive a

POD request from any

client.

port-number(Optional) The network access server User Data-

gram Protocol (UDP) port to use for POD requests. Default

value is 1700.

auth-type—(Optional) The type of

authorization required for disconnecting sessions.

any—Session that matches all of the attributes sent in the
POD packet is disconnected. The POD packet may contain
one or more of four key attributes (user-name,
framed-IP-address, session-ID, and

session-key).

all—Only a session that matches all four key attributes is
disconnected. All is the default.

session-key—Session with a matching session-key attribute
is disconnected. All other attributes are ignored.

ignore—(Optional) Ignore the session key or the server key

received in the POD packet for session matching.

server-key—Configures the shared-secret text string.

string—The shared-secret text string that is shared between
the network access server and the client workstation. This
shared-secret string must be the same on both systems.

Advertising