Configuring the Router to Obtain the LLID for a Subscriber

To configure the router to obtain the LLID for a subscriber:

1. Create an AAA profile that supports subscriber preauthentication.
   host1(config)#aaa profile preAuthLlid host1(config-aaa-profile)#pre-authenticate host1(config-aaa-profile)#exit
2. Define a RADIUS preauthentication server.
   host1(config)#radius pre-authentication server 10.10.10.1 host1(config-radius)#key abc123 host1(config-radius)#exit
3. Associate the AAA profile with the designated PPP interface.
   host1(config)#interface atm 4/3.101 host1(config-subif)#ppp aaa-profile preAuthLlid
4. (Optional) Verify that preauthentication support is configured for the AAA profile.

   host1(config-subif)#run show aaa profile name PreAuthLlid
   preAuthLlid:
       atm nas-port-type: ADLSL-CAP
       ethernet nas-port-type: Cable
       profile-service-description: xyzService
       pre-authenticate 
       allow xyz.com
       deny default
       translate xyz1.com abc.com

   For information, see Setting Baselines for Remote Access.

5. (Optional) Verify configuration of the RADIUS preauthentication server.

   host1(config-subif)#run show radius pre-authentication servers
   

                  RADIUS Pre-Authentication Configuration
                  ---------------------------------------
                   Udp    Retry             Maximum    Dead
    IP Address     Port   Count   Timeout   Sessions   Time   Secret
   -------------   ----   -----   -------   --------   ----   ------
   10.10.10.1      1812   3       3         255        0      radius

   You can also display configuration information for preauthentication servers by using the show radius servers command. For information, see Setting Baselines for Remote Access.

6. (Optional) Display statistics for the RADIUS preauthentication server.

   To display preauthentication statistics, use the show radius pre-authentication statistics command. For information, see Setting Baselines for Remote Access.

   To display a count of preauthentication requests and responses, use the show aaa statistics command. For information, see Setting Baselines for Remote Access.