Cisco 1721 remote access VPN / extended authentication

[ray.ortiz]

I want to configure extended authentication against a Windows 2k radius server on a Cisco 1721 for our cisco vpn client users . Does any one have a sample config that would allow me to do this on that router. I have sucessfully done extended authentication on a pix firewall against a WIN2k radius server.

Thanks....

[gfullage]

Here's one for TACACS (http://www.cisco.com/warp/public/480/ipsec-ios-tacacs.html), so just change the line:

> aaa authentication login userauthen group tacacs

to:

> aaa authentication login userauthen group radius

then add a Radius server with:

> radius-server host x.x.x.x key

[ray.ortiz]

I only want users to be authenticated when they attempt to make a vpn connection. When I configured the router for AAA it also authenticates me when I try to telnet to it. Is there a way just to have it authenticate users trying to vpn through our serial interface?

Thanks.