TACACs and PPP

[cclark]

I have a 2620 with a 16 port async modeult for RAS dialin. I also have two T1 WIC's that I use to connect to a remote site (ppp multilinked). Can I setup the router to provide authentication for the PPP dialup users but not on the two T1's? I can't find docs on how to do this or seperate the two.

[tepatel]

I assume that you have TACACS server for PPP users authentication thru async interface..you can heve aaa scheme (list) like this

aaa authentication ppp ppp-users group tacacs+

Now under the async interface, enter the command

ppp authentication chap pap ppp-users

visit here for more information

http://www.cisco.com/warp/public/793/access_dial/security.html

Now, if you do need local authentication for T1 users then you need one more scheme like

aaa authentication ppp t1-users local

assign that t1-users scheme like same way under the T1 interfaces..

If you don't need authentication for T1 users at all, then don't configure the "ppp authentication" command under the interfaces.