I am having difficulties understanding the following config as I don't have the ISDN equipment to test on :( I apprecate it if someone can explain it to me.
What interested me is the ppp and aaa authentication, are they correct? I created 2 groups (one tacacs+ server group name SANJOSE and a radius server group name ISDN. Can two groups have the same IP address?
All I want is allowing the users in group SANJOSE to access vty, aux, console and ISDN routers can authenticate only when the primary link failed.
Regards,
b
enable password cisco
!
aaa new-model
!
aaa group server tacacs+ SANJOSE
server 10.1.1.1
!
aaa group server radius+ ISDN
server 10.1.1.1
!
aaa authentication login default group SANJOSE tacacs+ enable
aaa authentication ppp ISDN-remote group ISDN
aaa authorization login default SANJOSE group tacacs+ enable
aaa authorization network ISDN-remote group radius
!
interface Dialer1
Description link to Cali
bandwidth 64
ip address 192.168.1.1 255.255.255.0
encapsulation ppp
dialer pool 1
dialer remotename site1
dialer-group 1
ppp authentication chap ISDN-remote
!
tacacs-server host 10.1.1.1 key cisco
