Perhap you may want to enable aaa authorization on the callback server and
config the ACS authorize on ppp & callback string to see whether it work or
not.
I have problem with callback & multilink, could you make it work?
----- Original Message -----
From: "li jun" <liuyang1976@xxxxxxxxxxx>
To: <security@xxxxxxxxxxxxxx>
Sent: Saturday, December 07, 2002 12:35 PM
Subject: ISDN Call back with Dialstring problem
> Cisco guys and security expert,
> here I meet a problem. I have condfig 2 router use ISDN call back
> successfully. and authention the call back server to TACACS server. do
step
> by step with Cisco DOC, everything works.
> then next step I try let call back server get the callback-dialstring from
> TACACS server, I can see the callback-dialer string has been send to call
> back server from TACACS server, but call back server does not call back
to
> the client.
>
> could you pls help me to check what's the problem or give me the Cisco web
> site to find the correct answer? thanks
>
> here is my config fot your reference.
>
> this is call back client configure:
>
> interface BRI0/0
> ip address 200.50.35.5 255.255.255.252
> encapsulation ppp
> ip ospf authentication message-digest
> ip ospf message-digest-key 2 md5 7 cisco
> ip ospf demand-circuit
> no ip mroute-cache
> dialer idle-timeout 40
> dialer map ip 200.50.35.6 name r1 broadcast 384960
> dialer load-threshold 100 either
> dialer-group 1
> isdn switch-type basic-net3
> no peer neighbor-route
> no cdp enable
> ppp callback request
> ppp authentication chap callin
> ppp chap hostname r1
> ppp multilink
>
> dialer-list 1 protocol ip permit
>
> here is the config of call back server
>
> aaa new-model
> aaa authentication login loginau group tacacs+ local
> aaa authentication ppp default group tacacs+
>
> interface BRI0/0
> ip address 200.50.35.6 255.255.255.252
> encapsulation ppp
> no ip route-cache
> ip ospf authentication message-digest
> ip ospf message-digest-key 2 md5 7 cisco
> no ip mroute-cache
> dialer callback-secure
> dialer aaa ===> want to get the dialer string from TACACS server
> dialer map ip 200.50.35.5 name r4 class callback broadcast
> dialer load-threshold 1 either
> dialer-group 1
> isdn switch-type basic-net3
> no cdp enable
> ppp callback accept
> ppp authentication chap
> ppp multilink
>
> map-class dialer callback
> dialer callback-server username
> dialer-list 1 protocol ip permit
>
>
> _________________________________________________________________
> SkA*;z5DEsSQ=xPP=;Aw#,GkJ9SC MSN Messenger: http://messenger.msn.com/cn
