Creating The Aaa Group - Cisco ASR 5000 Series Administration Manual

▀ Configuring the System to Perform as a Femto Network Gateway
exit
ip route 0.0.0.0 0.0.0.0 <gateway_ip_address> <fng_interface_name>
exit
port ethernet <slot_number/port_number>
no shutdown
bind interface <fng_interface_name> <fng_context_name>
end
The ip route command in this example creates a default route for the interface between the FAPs in the network and
the FNG. This interface carries the IPSec tunnels between the FAPs and the FNG.

Creating the AAA Group

Use the following configuration example to create the AAA group configuration for FAP authentication and to bind the
interface to an Ethernet port:
configure
context <fng_context_name>
interface <fng_aaa_interface_name>
ip address <ip_address> <subnet_mask>
exit
aaa group <group_name>
radius algorithm round-robin
radius accounting algorithm round-robin
radius attribute nas-ip-address address <ip_address>
radius strip-domain authentication-only
radius dictionary <aaa_custom-dictionary>
radius accounting interim interval <integer>
radius server <ip_address> encrypted key <key> port <port_num>
radius accounting server <ip_address> encrypted key <key> port
<port_num>
exit
exit
▄ Cisco ASR 5000 Series Femto Network Gateway Administration Guide
42
Femto Network Gateway Configuration
OL-24872-01