Помогите пожалуйста советомСобрал такакс tac+ia-0.96pre9.3, написал вот такой конфиг:
#
# Configuration tac_plus
#
default authentication = file "/etc/passwd"
default authorization = permit
allow-from = 212.xxx.xxx.xxx
#
# NAS
#
nas = vpn {
nasaddr = 212.xxx.xxx.xxx
key = Asg34BHNKl
}
accounting file = /var/log/tacacs
user = test
{
name = "test user"
login = cleartext "23681111k"
maxsess = 1
service = ppp protocol = ip { inacl = 120 addr = "212.yyy.yyy.yyy" }
service = ppp protocol = vpdn { }
}
Натравил на него циску на которой настроен VPN - сервер, циска сконфигурирована, работает с другим такаксом, я просто в двух местах меняю ip-адрес tacacs+ сервера.
Вот конфиг циски:
aaa new-model
aaa group server tacacs+ heln
server 212.xxx.xxx.xxx
!
aaa authentication login console none
aaa authentication login dialup local group heln
aaa authentication login comtat local group heln
aaa authentication login isdn1 local
aaa authentication ppp dialup if-needed group heln
aaa authentication ppp leased none
aaa authentication ppp isdn1 local
aaa authorization exec dialup local group heln
aaa authorization exec comtat local group heln
aaa authorization exec isdn1 local group heln
aaa authorization network public group heln
aaa authorization network dialup group heln
aaa authorization network leased none
aaa authorization network isdn local
aaa accounting exec default start-stop group heln
aaa accounting network default start-stop group heln
и вот еще:
tacacs-server host 212.xxx.xxx.xxx key Asg34BHNKl
tacacs-server attempts 5
tacacs-server directed-request
при попытке подключиться под логином test tacacs пишет в лог следующее:
Mon Jul 31 17:31:56 2006 [6669]: acl_verify: name = <test>
Mon Jul 31 17:31:56 2006 [6669]: cfg_getmember rets NULL
Mon Jul 31 17:31:56 2006 [6669]: acl_verify ret PERMIT
Mon Jul 31 17:31:56 2006 [6669]: cfg_getmember rets NULL
Mon Jul 31 17:31:56 2006 [6669]: cfg_getmember rets NULL
Mon Jul 31 17:31:56 2006 [6669]: pap-login query for 'test' Virtual-Access8 from 212.xxx.xxx.xxx rejected
Mon Jul 31 17:31:56 2006 [6669]: cfg_getmember rets NULL
debug tacacs events говорит:
1w4d: TAC+: Opening TCP/IP to 212.xx.xx.xx/49 timeout=5
1w4d: TAC+: Opened TCP/IP handle 0x62ED0894 to 212.xx.xx.xx/49
1w4d: TAC+: periodic timer started
1w4d: TAC+: 212.xx.xx.xx req=62C720A8 Qd id=441888330 ver=192 handle=0x62ED0894
(ESTAB) expire=5 ACCT/REQUEST/START queued
1w4d: TAC+: 212.xx.xx.xx ESTAB id=441888330 wrote 104 of 104 bytes
1w4d: TAC+: 212.xx.xx.xx req=62C720A8 Qd id=441888330 ver=192 handle=0x62ED0894
(ESTAB) expire=4 ACCT/REQUEST/START sent
1w4d: TAC+: 212.xx.xx.xx CLOSEWAIT read=12 wanted=12 alloc=12 got=12
1w4d: TAC+: 212.xx.xx.xx CLOSEWAIT read=17 wanted=17 alloc=17 got=5
1w4d: TAC+: 212.xx.xx.xx received 17 byte reply for 62C720A8
1w4d: TAC+: req=62C720A8 Tx id=441888330 ver=192 handle=0x62ED0894 (CLOSEWAIT)
expire=4 ACCT/REQUEST/START processed
1w4d: TAC+: periodic timer stopped (queue empty)
1w4d: TAC+: Closing TCP/IP 0x62ED0894 connection to 212.xx.xx.xx/49
Помогите пожалуйста разобраться!!
Заранее благодарю!!
