virtual-profile aaa - Supported command

[jim-bell]

Hi There,

Can anyone tell me what IOS version supports virtual-profile aaa command.

We have had problems trying it with 12.3(7)T3, 12.3(9), 12.3(10) though release notes stated it is supported.

However on trying to enter it on our 3745 it is not there as an option only those below;

virtual-profile virtual-template

virtual-profile if-needed

is there anything else we need to do to enable virtual-profile aaa ? We are using the 3745 with PRI card for ISDN and async dial-up users in conjunction with Cisco ACS 2.6 where our dial-up users have addditional aaa config's held. For info our ISDN users have dialer profiles defined.

Thanks in advance.

[gfullage · Accepted solution]

Hmmm, this is a little confusing and our documentation on it leaves a lot to be desired to say the least, my apologies.

Seems that from around 12.2(8)T and 12.2(15), as a side-effect for a fix to bug CSCdv19928 (http://www.cisco.com/cgi-bin/Support/Bugtool/onebug.pl?bugid=CSCdv19928&Submit=Search) they removed this command cause it was confusing for customers.

Basically from now on, if we receive attributes from AAA we make a runtime decision as to whether we need a virtual-access int. In short, the command is now always turned on, regardless of whether you see it in the config or not, and the router makes the decision on whether to use it or not dependent on what attributes it receives from the AAA server.

Sorry for any confusion.

[jim-bell]

Thanks for your reply, that has helped.