Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Overriding AAA to Perform IPCP and IPv6CP Negotiations Based on RADIUS-Returned Attributes

    Normally, AAA performs IPCP and IPv6CP negotiations based on the RADIUS attributes returned from the RADIUS server and the subscriber domain map configurations. You can override the standard IPCP and IPv6CP negotiations by using the aaa radius-override-ncp-negotiation command, which allows you to enable or disable IPCP and IPv6CP negotiations only when one of the following RADIUS attributes is returned in the Access-Accept message:

    • Framed-Ip-Address [8]
    • Framed-Pool [88]
    • Framed-Ipv6-Prefix [97]
    • Ipv6-NdRa-Prefix [26-129]
    • Framed-Ipv6-Pool [100]
    • Ipv6-Ndra-Pool [26-157]
    • Framed-Interface-Id [96]
    • Delegated-Ipv6-Prefix [123]

    To enable IPCP and IPv6CP negotiations for IP and IPv6 clients based on RADIUS-returned attributes:

    • Issue the aaa radius-override-ncp-negotiation command with the enable keyword in Global Configuration mode.
      host1(config)#aaa radius-override-ncp-negotiation enable

    To disable IPCP and IPv6CP negotiations for IP and IPv6 clients based on RADIUS-returned attributes:

    • Issue the aaa radius-override-ncp-negotiation command with the disable keyword in Global Configuration mode.
      host1(config)#aaa radius-override-ncp-negotiation disable

    Use the no version to disable IPCP and IPv6CP negotiations based on RADIUS-returned attributes, which is the default behavior. IPCP and IPv6CP negotiations are initiated on the basis of RADIUS-returned attributes and configurations done on the subscriber domain map.

    Published: 2014-08-13