Defining Radius And Enabling Nas-Port; Defining A Vrf; Applying Aaa To A Virtual Template - Cisco 10000-2P2-2DC Software Configuration Manual

Chapter 11 Configuring Local AAA Server, User Database—Domain to VRF
Command
Step 3
Router(config)# aaa authorization network
list-name local if-authenticated
Step 4
Router(config)# aaa accounting network
list-name start-stop group radius
Step 5
Router(config)# aaa authentication ppp
default local
Step 6
Router(config)# aaa authorization network
default local

Defining RADIUS and Enabling NAS-PORT

To define RADIUS and enable NAS-PORT, enter the following commands in global configuration mode:
Command
Step 1
Router(config)# radius-server host
ip-address auth-port 1645 acct-port 1646
key password
Step 2
Router(config)# radius-server attribute
nas-port format d

Defining a VRF

To define a VRF, enter the following commands beginning in global configuration mode:
Command
Step 1
Router(config)# ip vrf vrf-name
Step 2
Router(config-vrf)# rd
route-distinguisher
Step 3
Router(config-vrf)# route-target {import
| export | both}
route-target-ext-community

Applying AAA to a Virtual Template

To apply AAA to a virtual template, enter the following commands in global configuration mode:
Command
Step 1
Router(config)# interface
virtual-template number
Step 2
Router(config)# ppp mtu adaptive
Step 3
Router(config)# ppp authentication pap
chap
OL-2226-23
Purpose
Specifies to use the local profile if authenticated.
Specifies RADIUS accounting as optional.
Required to allow the definition of the AAA authentication list in
the AAA attribute list.
Required to allow the definition of the AAA authorization list in
the AAA attribute list.
Purpose
Defines the Radius server that AAA authentication, authorization
and accounting requests are sent to.
Defines NAS-Port information to be sent to the AAA accounting
server. (optional)
Purpose
Enters VRF configuration mode and defines the VRF instance by
assigning a VRF name.
Creates routing and forwarding tables.
Creates a list of import an export route target communities for the
specified VRF.
Purpose
Defines the virtual template to use for PPP.
For PPPoE, defines auto negotiation of MTU size.
Enables PAP, then CHAP, for PPP authentication.
Cisco 10000 Series Router Software Configuration Guide
11-7