Долго мучаюсь над такой проблемой. Tacacs+ не выдает диалапному клиенту адрес, хотя тот и прописан в конфиге.
настройки такие:
---- 3640 ------
version 12.2
!
aaa authentication login default group tacacs+ local-case
aaa authentication login noauth none
aaa authentication login local local-case
aaa authentication ppp default if-needed group tacacs+ local
aaa authorization exec default group tacacs+ if-authenticated
aaa authorization network default group tacacs+
!
interface Group-Async1
ip unnumbered FastEthernet0/0.1
ip nat inside
encapsulation ppp
async mode interactive
peer default ip address pool dialup
group-range 33 48
!
ip local pool dialup 192.168.1.10 192.168.1.40
!
line 33 48
session-timeout 30 output
location Dial-up
no exec-banner
exec-timeout 6 0
no activation-character
modem InOut
rotary 1
terminal-type network
exec-character-bits 8
special-character-bits 8
transport preferred none
transport input telnet
transport output telnet
autoselect during-login
autoselect ppp
telnet transparent
stopbits 1
speed 38400
flowcontrol hardware
----------------
--- Tacacs+ ---- tac_plus version F4.0.4.alpha
key = "*******"
accounting file = "/var/log/tac_plus.acc"
default authorization = permit
user = **** {
login = des ***********
service = exec {
noescape = true
autocmd = "ppp"
}
service = ppp protocol = ip {
default attribute = permit
addr = 192.168.1.44
}
}
----------------
Что я делаю не так? подскажите плз.
Вариант для распечатки
Маршрутизаторы CISCO и др. оборудование. (Public)
(??) on
27-Июн-05, 07:34 (MSK)
