topic Re: Line has invalid autocommand " ppp negotiate" in Network Access Control

Line has invalid autocommand " ppp negotiate"

tomas.backo — Sun, 10 Mar 2019 22:08:00 GMT

Hi all,

i am trying to deploy radius authentication on my switches.

aaa authentication login default group radius local

aaa authorization exec default group radius local

I think that these two command is everythink what i need for radius authentication and authorization.

But when i try to login i get error message:

Line has invalid autocommand " ppp negotiate"

Please could you help me? I try to use command

line vty 0 15

no autocommand ppp negotiate

but with no success.

Please i need you urgent help.

Thanks a lot

Tomas

Re: Line has invalid autocommand " ppp negotiate"

Jagdeep Gambhir — Wed, 02 May 2007 16:43:54 GMT

Tomas,

This message is seen when switch has exec authorizaton configured,and the RADIUS server has settings for a PPP connection. Therefore the switch is attempting to start PPP as it was asked to do by the RADIUS server. PPP can't be started on a telnet connection, so it fails and disconnects.

Suggestion : Either remove exec authorization or remove the Service-Type=Framed and/or

Framed-Protocol=PPP attributes from the RADIUS profile.

I hope the information would help resolving your query.

Re: Line has invalid autocommand " ppp negotiate"

tomas.backo — Thu, 03 May 2007 06:13:10 GMT

Hi igambhir,

thank very much, i remove service-type and framed-protocol from radius, and that error message doesn't appear again.

But new problem arised for me 🙂

Authorization failed

But i don't know why?

I have command

aaa authorization exec default group radius

and i expect that when i am able to authenticate on radius i will be able to authorized also.

It is needed to set somethning on microsoft radius server?

Thanks in advance

Tomas

Re: Line has invalid autocommand " ppp negotiate"

Jagdeep Gambhir — Thu, 03 May 2007 12:43:48 GMT

Make service type = Login

If still error is there , get debugs

debug authorization

debug radius

Re: Line has invalid autocommand " ppp negotiate"

chenriquevz — Tue, 05 Oct 2010 18:39:05 GMT

If you are using IAS on Windows 2k3 you can apply the "Request must contain the message authenticator attribute" check box to your switch profile!

Re: Line has invalid autocommand " ppp negotiate"

imperialme — Tue, 10 Oct 2017 15:33:13 GMT

Worked like a charm for my setup. Much thanks.

Re: Line has invalid autocommand " ppp negotiate"

jayznetwork — Thu, 24 Feb 2022 20:26:35 GMT

Hi tomas,

can you tell me how did you remove the framed-protocol from radius ? I'm having the same problem

Re: Line has invalid autocommand " ppp negotiate"

robert.dumitru — Wed, 20 Apr 2022 11:51:17 GMT

You are the Best 🙂

Work like a charm 🙂

you made my day