cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2429
Views
0
Helpful
2
Replies

AAA Authentication ppp local

m.grossenbacher
Level 1
Level 1

I got problems with ISDN Dial-in Users which authenticate with a local user.

If one user is authenticated no other can log in with the same user.

Is there a restriction?

With the async user there is no problem.

2 Replies 2

4brown
Level 1
Level 1

Assuming you are speaking of router clients and have CHAP configured, then the issue is the username (which would be the hostname) of each remote device and a shared secret must be configured on the central router.

You can avoid this by using the "ppp chap hostname" command on the router clients to specify a username that is maintained in the central site. Then, your central site can be configured with a single username and shared secret to authenticate all the router clients.

See:

http://www.cisco.com/warp/public/131/ppp_callin_hostname.html

tepatel
Cisco Employee
Cisco Employee

I assume that you want many users to dialin using the same username.

For that you need to configure the interface for following two commands

ppp ipcp ignore-map

dialer mult-map-same-name

When the user dialin, a dynamic dialer-map is created on the router which should have unique ip address and username with it. But since in your case the username is same for all the simultaneous dialin sessions, you need to inform the router for to Ignore dialer map when negotiating peer IP address using first command and other command will allow more then one user to dial in to the dialer with the same ppp user_name