topic Re: Virtual-Profile with two "interface-configs" (AAA / csunix)? in Network Access Control

Virtual-Profile with two "interface-configs" (AAA / csunix)?

wagnerch — Sun, 10 Mar 2019 14:07:27 GMT

Hi,

I want to configure virtual-profiles on my cisco secure server unix 2.3.6(1) but I have problems if I want to configure more than one parameter.

# ./ViewProfile -u test

User Profile Information

user = test{

password = chap "********"

service=ppp {

protocol=lcp {

set callback-dialstring=123456

set interface-config="ip unnumbered loopback119"

set interface-config="ppp callback accept"

}

protocol=ip {

set addr=10.1.1.100

}

I always get an error but If I only use one interface-config-parameter it functions. (using "command1\ncommand2" makes also an error)

Has anybody suggestions how I have to configure it in the css-web-gui and on the router. (I use tacacs)

Regards,

Chris

Re: Virtual-Profile with two "interface-configs" (AAA / csunix)?

smalkeric — Mon, 03 Feb 2003 16:13:56 GMT

Well I am not sure if more then ./viewprofile is supported, but you can check the below URL for sample configurations

http://www.cisco.com/en/US/tech/tk583/tk59/technologies_configuration_example09186a0080094656.shtml

Re: Virtual-Profile with two "interface-configs" (AAA / csunix)?

4brown — Mon, 03 Feb 2003 18:10:34 GMT

I don't think multiple commands are supported in the web interface, but they are in CLI. Use:

$CSUBASE/CLI/AddProfile -p 9900 -u netpro -pw chap,password -a 'service=ppp{\n protocol=ip{\n

set addr="10.1.1.100" \n}\n protocol=lcp {set interface-config="ip unnumbered loopback119"\n set interface-config="ppp callback accept"}\n }\n'

Re: Virtual-Profile with two "interface-configs" (AAA / csunix)?

wagnerch — Tue, 04 Feb 2003 06:10:10 GMT

Hi,

I tried the "AddProfile" in the CLI but it looks the same as in the Web-interface. If I enter a second "interface-config" only one is used. Normally I think it is the first one, but the only command I ever see in the dynamic if-config is the "ip unnumbered". Using any other command like "ppp callback accept" or "keepalive 10" is not active.

So I still have the problem that only one line is used. Maybe it is still the wrong syntax or I want to activate the wrong commands/order?

Regards,

Chris

Re: Virtual-Profile with two "interface-configs" (AAA / csunix)?

4brown — Tue, 04 Feb 2003 15:21:51 GMT

Worked great for me the syntax I sent....what Solaris version are you using? Are you using the internal SQLAnywhere server? Have you loaded the latest patches for CSU?

Re: Virtual-Profile with two "interface-configs" (AAA / csunix)?

wagnerch — Wed, 05 Feb 2003 05:33:33 GMT

Hi,

I am using Solaris 2.7 (5.7 Generic_106541-18 sun4u sparc SUNW,Ultra-1), and the internal SQLAnywhere. CSU-version?? I use CiscoSecureServer 2.3.6.1.

So you think the commands should be possible?

Regards,

Chris

Re: Virtual-Profile with two "interface-configs" (AAA / csunix)?

4brown — Wed, 05 Feb 2003 13:53:21 GMT

Hi Chris,

Yes, they should work via CLI. The only difference is I am running Solaris 2.5(1). If you cut and paste the CLI syntax I sent and it still does not work, I am at a loss. This may be related to BugID CSCds37958, but note the CLI should work.

You may consider opening a case with the TAC at:

http://www.cisco.com/cgi-bin/front.x/case_tools/caseOpen.pl

Thanks

Re: Virtual-Profile with two "interface-configs" (AAA / csunix)?

wagnerch — Thu, 06 Feb 2003 05:36:17 GMT

Thanks for help,

I am opening a case.

Regards,

Chris