Cisco 10000 - Manual (Page 360)

16-58
Cisco 10000 Series Router Software Configuration Guide
OL-2226-23
Chapter 16 Configuring RADIUS Features
RADIUS Packet of Disconnect
Configuring AAA POD Server
To configure the Calling-Station-ID format, perform the following task in global configuration mode:
Verifying AAA POD Server
To verify that the router is configured correctly to performs an AAA POD server, enter the
show running-configuration command in privileged EXEC mode to display the command settings for
the router.
Router# show running-configuration
!
aaa new-model
aaa authentication ppp default group radius
aaa authorization network default group radius
aaa accounting network default start-stop group radius
aaa pod server clients port auth-type [all/ any/ session-key]
server-key cisco
Command Purpose
Router(config)# aaa pod server clients [client ip
address] port [port-number] [auth-type {any| all|
session-key }] [ignore {session-key | server-key}]
server-key string
Enables inbound user sessions to be disconnected when specific
session attributes are presented.
client ip-address—(Optional) Registers the IP address of all the
clients who can send POD requests. If not set, it can receive a
POD request from any
client.
port-number—(Optional) The network access server User Data-
gram Protocol (UDP) port to use for POD requests. Default
value is 1700.
auth-type—(Optional) The type of
authorization required for disconnecting sessions.
• any—Session that matches all of the attributes sent in the
POD packet is disconnected. The POD packet may contain
one or more of four key attributes (user-name,
framed-IP-address, session-ID, and
session-key).
• all—Only a session that matches all four key attributes is
disconnected. All is the default.
• session-key—Session with a matching session-key attribute
is disconnected. All other attributes are ignored.
ignore—(Optional) Ignore the session key or the server key
received in the POD packet for session matching.
server-key—Configures the shared-secret text string.
• string—The shared-secret text string that is shared between
the network access server and the client workstation. This
shared-secret string must be the same on both systems.