07-03-2011 11:09 AM - edited 03-16-2019 05:45 AM
Hello,
I have some problems with AAA configuration on C3945E box.
Cisco is configured to handle sip calls from X.X.X.X and direct them to Y.Y.Y.Y.
Additionally i have radius server which is acting as a AAA node.
All calls passing through Cisco should be authorized/authenticated first then accounted.
Accounting is working fine, but still struggling with auth.
Here is a snippet from my config
Referring to
http://www.cisco.com/en/US/docs/ios/12_ ... #wp1835777
is should be more less okay.
aaa new-model
!
!
aaa group server radius BILLING
server 10.10.10.5 auth-port 1804 acct-port 1904
!
aaa authentication login default group BILLING local
aaa authorization exec default group BILLING local
aaa authorization network default group BILLING local
aaa accounting send stop-record authentication failure
aaa accounting connection h323 start-stop group BILLING
aaa authorization exec default group BILLING local
aaa authorization network default group BILLING local
!
!
aaa session-id common
!
!
gw-accounting aaa
!
radius-server host 10.10.10.5 auth-port 1804 acct-port 1904 key 7
145311130D1006000531
radius-server vsa send accounting
radius-server vsa send authentication
IOS version is: Version 15.1(1)T2
Is aforementioned configuration correct?
Maybe i should use some tcl script to achieve auth?
Maybe the config is okay, but it must be coupled with proper sip configuration.
Thx in advance,
Maciej
07-07-2011 03:15 PM
I was trying to play around with aaa config but still without success.
Does anyone of you guys could share working config.
The only thing from auth that works is login auth.
Thanks.
07-07-2011 04:59 PM
Any silent authentication script is needed - app_passport_silent ?
Thanks in advance.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide