We have an AS5300 that standard internet users dial into to begin a ppp session. I was wondering if there is a way to stop users from dialing in manually with a terminal and entering commands into the user exec level. I would also like to prevent this when windows brings a terminal up after dial.
Thanks AL
This is a copy of my config.
aaa new-model
aaa group server radius first
server 111.111.111.111 auth-port 1812 acct-port 1813
!
aaa group server radius second
server 111.111.111.111 auth-port 1812 acct-port 1813
server 111.111.111.112 auth-port 1812 acct-port 1813
!
aaa authentication login default group radius local
aaa authentication login consoleport local
aaa authentication login virtualterminal local
aaa authentication login auxiliaryport local
aaa authentication ppp default if-needed group radius
aaa authorization network default group radius
aaa accounting update newinfo
aaa accounting network default wait-start group radius
aaa dnis map enable
aaa dnis map 5555555 authentication ppp group first
aaa dnis map 5555555 authentication login group first
aaa dnis map 5555555 accounting network wait-start group first
aaa dnis map 5555555 authentication ppp group second
aaa dnis map 5555555 authentication login group second
aaa dnis map 5555555 accounting network wait-start group second
interface Group-Async1
ip unnumbered FastEthernet0
encapsulation ppp
ip tcp header-compression passive
no ip mroute-cache
async mode interactive
peer default ip address pool async
no fair-queue
ppp authentication pap chap
ppp multilink
group-range 1 96
line 1 96
modem Dialin
modem autoconfigure type mica2.7.3.0
transport input all
autoselect during-login
autoselect ppp
