Defining Aaa Attribute Lists; Subscriber Profiles - Cisco 10000-2P2-2DC Software Configuration Manual

10000 series
Table of Contents

Advertisement

Chapter 11
Configuring Local AAA Server, User Database—Domain to VRF

Defining AAA Attribute Lists

Typically, you define an AAA attribute list for each user name domain. Cisco IOS Release 12.3(7)XI1
introduces the following two new commands to define local AAA attribute lists and attribute types:
Command
Router(config)# aaa attribute list aaa attribute list
name
Router(config)# aaa attribute type name value [service
ppp] [protocol {ip | atm | vpdn}] [tag]
The following is an example of the commands you use to configure method lists:
aaa attribute list <name>
attribute type <name> <value> <service> <protocol> <tag>

Subscriber Profiles

Subscriber profiles are used to match user domain names, and on a match to use a defined AAA attribute
list. Cisco IOS Release 12.3(7)XI1 introduces the following new command to define subscriber profiles:
Command
Router(config)# subscriber profile domain-name
The following is an example of the commands you use to configure a subscriber profile:
subscriber authorization enable
subscriber profile domain-name
service local
aaa attribute list aaa attribute list name
OL-2226-23
Purpose
Defines an AAA attribute list locally on the router. This attribute
list is applied to the PPP session.
aaa attribute name is the name of the local AAA attribute list.
Defines an AAA attribute locally on the router. These attributes
are RADIUS attributes in Cisco IOS AAA format.
name defines the Cisco IOS AAA internal name of the IETF
RADIUS attribute.
value defines a string, binary, or IPv4 address value. This is the
RADIUS attribute that is being defined but in IOS AAA format.
service defines the access method, which is typically PPP.
protocol can be ip, atm, or vpdn.
tag provides a means of grouping attributes that refer to the same
VPDN tunnel.
Purpose
Defines an AAA attribute list locally on the router. This attribute
list is applied to the PPP session.
domain-name is the PPP user name domain.
Cisco 10000 Series Router Software Configuration Guide
11-5

Advertisement

Table of Contents
loading

This manual is also suitable for:

1000510008

Table of Contents