Overriding AAA to Perform IPCP and IPv6CP Negotiations Based on RADIUS-Returned Attributes

Normally, AAA performs IPCP and IPv6CP negotiations based on the RADIUS attributes returned from the RADIUS server and the subscriber domain map configurations. You can override the standard IPCP and IPv6CP negotiations by using the aaa radius-override-ncp-negotiation command, which allows you to enable or disable IPCP and IPv6CP negotiations only when one of the following RADIUS attributes is returned in the Access-Accept message:

To enable IPCP and IPv6CP negotiations for IP and IPv6 clients based on RADIUS-returned attributes:

To disable IPCP and IPv6CP negotiations for IP and IPv6 clients based on RADIUS-returned attributes:

Use the no version to disable IPCP and IPv6CP negotiations based on RADIUS-returned attributes, which is the default behavior. IPCP and IPv6CP negotiations are initiated on the basis of RADIUS-returned attributes and configurations done on the subscriber domain map.

Related Documentation