5300 Access Server

Sep 18, 2006 2 Replies

We have been using radius till now to validate dialup users, but in reality we want any username and password to work.



If the person connects with a valid username and password that should work and assign any radius details such as IP or SUBNET etc, but ultimayely any username/password pair should be able to work.



Looking for the commands to enable this.



Currently we have aaa new-model aaa authentication login use-radius radius local aaa authentication login dialins radius local aaa authentication ppp default if-needed radius local aaa authentication ppp dialins radius local aaa authentication ppp user-radius if-needed radius aaa authorization network default radius local aaa accounting suppress null-username aaa accounting exec default stop-only radius aaa accounting exec Caller-ID start-stop radius aaa accounting network default stop-only radius



radius-server host x.x.x.x auth-port 1645 acct-port 1646



Gary


Modify your RADIUS server to send Access-Accept regardless of the username/password received.

Aaron

Really want to have the server allow anything not found in the radius database or when the radius is Down.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required