cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
748
Views
0
Helpful
2
Replies

AAA configuration on CUBE, problem with auth

Maciej Bylica
Level 1
Level 1

Hello,

I have some problems with AAA configuration on C3945E box.

Cisco is configured to handle sip calls from X.X.X.X and direct them to Y.Y.Y.Y.

Additionally i have radius server which is acting as a AAA node.

All calls passing through Cisco should be authorized/authenticated first then accounted.

Accounting is working fine, but still struggling with auth.

Here is a snippet from my config

Referring to

http://www.cisco.com/en/US/docs/ios/12_ ... #wp1835777

is should be more less okay.

aaa new-model

!

!

aaa group server radius BILLING

server 10.10.10.5 auth-port 1804 acct-port 1904

!

aaa authentication login default group BILLING local

aaa authorization exec default group BILLING local

aaa authorization network default group BILLING local

aaa accounting send stop-record authentication failure

aaa accounting connection h323 start-stop group BILLING

aaa authorization exec default group BILLING local

aaa authorization network default group BILLING local

!

!

aaa session-id common

!

!

gw-accounting aaa

!

radius-server host 10.10.10.5 auth-port 1804 acct-port 1904 key 7

145311130D1006000531

radius-server vsa send accounting

radius-server vsa send authentication

IOS version is: Version 15.1(1)T2

Is aforementioned configuration correct?

Maybe i should use some tcl script to achieve auth?

Maybe the config is okay, but it must be coupled with proper sip configuration.

Thx in advance,

Maciej

2 Replies 2

Maciej Bylica
Level 1
Level 1

I was trying to play around with aaa config  but still without success.

Does anyone of you guys could share working config.

The only thing from auth that works is login auth.

Thanks.

Any silent authentication script is needed - app_passport_silent ?

Thanks in advance.