cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1982
Views
0
Helpful
3
Replies

AAA/AUTHOR/LCP: Denied & hssi interface

bbloise
Level 1
Level 1

Greetings,

I have a 3640 with an ATM card for our DSL customers. I have installed a HSSI interface to connect to a DS3.

The HSSI interface is not connecting. I get "hssi2/0 is up, line protocol is down". I set up a "debug cond hssi2/0" and a "debug ppp nego" and I got the following error:

Hs2/0 AAA/AUTHOR/LCP: Denied

I do have the router set up to authenticate my DSL customers through a radius server. Other debugs shows me that the router is communicating with the radius to "authenticate" the Hssi2/0 line.

Here is the "AAA" portion of my configuration:

aaa new-model

aaa authentication login default local

aaa authentication login console local

aaa authentication ppp default if-needed group radius local

aaa authorization network default group radius

aaa accounting update newinfo

aaa accounting exec default start-stop group radius

aaa accounting network default start-stop group radius

What do I need to do get the hssi interface to connect WITHOUT trying to authenticate through the radius server and still allow my DSL customers to authenticate?

bob bloise

system administrator

trellis technologies, Inc.

(704) 849-7789

3 Replies 3

Nairi Adamian
Cisco Employee
Cisco Employee

You can try to configure a method list for the ppp authentication and network authorization and only apply it to the lines that are needed.

Default method list is applied to all interfaces.

Hope this helps,

-Nairi

I have looked for some configuration examples and can't any. Can anyone point me to a page with some conf examples?

Thanks in advance.........

bob bloise

4brown
Level 1
Level 1

Turn off authorization on the HSSI interface:

aaa authorization network NO_AUTHOR none

int hs2/0

ppp authorization NO_AUTHOR