Downloads |
Table Of Contents
Supported Standards, MIBs, and RFCs
Configuring Maximum Number of User Links
Verifying Maximum Number of User Links
User Maximum Links
This document includes the following sections:
•
Supported Standards, MIBs, and RFCs
Feature Overview
The User Maximum Links feature provides a method to limit the number of inbound connections a user can establish with a device. This maximum connection limit is only imposed on links that have name authentication configured.
Previously, there was no method to limit the number of connections a user could establish.
In multilink environments, each PPP multilink connection is counted as one connection.
Benefits
The User Maximum Links feature enables ISPs to limit the number of inbound connections a user can establish so that they can provide various levels of subscriptions at different costs.
Users who desire more bandwidth can be charged a higher rate to establish multiple connections, while users who require only a single connection can be charged a discounted rate.
Restrictions
•
•
•
Related Documents
For more information on AAA and PPP encapsulation, see:
•
For more information on PPP encapsulation, see:
•
Supported Platforms
All Cisco IOS platforms running Cisco IOS Release 12.0(5)T or later.
Supported Standards, MIBs, and RFCs
MIBs
None
For descriptions of supported MIBs and how to use MIBs, see the Cisco MIB web site on CCO at http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml.
RFCs
None
Standards
None
Prerequisites
Before using the User Maximum Links feature, you need to complete the following tasks:
•
•
•
Configuration Tasks
See the following sections for configuration tasks for the User Maximum Links feature. Each task in the list indicates if the task is optional or required.
•
Configuring Maximum Number of User Links
Verifying Maximum Number of User Links
Step 1
Router(config)# username althea user-maxlinks 1 password settlebackStep 2
Step 3
Step 4
Step 5
Step 6
Configuration Examples
In the following example, a user with the username sTephen can establish a maximum of five connections. sTephen can connect through serial interface 1/0, which has a dialer map configured for him or through PRI interface 0/0:23, which has dialer profile interface 0 dedicated to him.
The aaa authorization network default local command must be configured. PPP encapsulation and authentication must be enabled on all the interfaces sTephen can connect to.
aaa new-modelaaa authorization network default localenable secret saintstephenenable password witharose!username sTephen user-maxlinks 5 password gardenhegoes!interface Serial0/0:23no ip addressencapsulation pppdialer pool-member 1ppp authentication chapppp multilink!interface Serial1/0ip address 2.2.2.4 255.255.255.0encapsulation pppdialer in-banddialer map ip 2.2.2.13 name sTephen 12345dialer-group 1ppp authentication chap!interface Dialer0ip address 1.1.1.4 255.255.255.0encapsulation pppdialer remote-name sTephendialer string 23456dialer pool 1dialer-group 1ppp authentication chapppp multilink!dialer-list 1 protocol ip permitCommand Reference
This section documents modified commands. All other commands used with this feature are documented in the Cisco IOS Release 12.0 command reference publication.
•
username
To specify the password to be used in the PPP Challenge Handshake Authentication Protocol (CHAP) caller identification and Password Authentication Protocol (PAP), use the username global configuration command. To remove a username from the configuration, use the no form of this command.
username name [user-maxlinks link-number] password secret
no username
Syntax Description
Default
No password is predefined.
Command Mode
Global configuration
Command History
11.1
This command was introduced.
12.0(5)T
The user-maxlinks keyword and link-number argument were added.
Usage Guidelines
Supply a name entry for the name argument for each remote system from which the local router or access server requires authentication.
The username command is required as part of the configuration for authentication protocols, such as CHAP and PAP. For each remote system that the local router or access server communicates with from which it requires authentication, you add a corresponding username command.
Note
To use the user-maxlinks keyword, you must also use the aaa authorization network default local command, and PPP encapsulation and name authentication on all the interfaces the user will be accessing.
If no secret password is specified and the debug serial-interface command is enabled, an error is displayed when a link is established and the authentication protocol challenge is not implemented. Debugging information about authentication protocols is available using the debug serial-interface and debug serial-packet commands. See the Debug Command Reference publication for more information.
Example
The following example configuration enables CHAP on serial interface 0. It also defines a password for local server Adam and remote server Eve. Eve can establish a maximum of five inbound connections to Adam.
hostname Adaminterface serial 0encapsulation pppppp authentication chapusername Eve user-maxlinks 5 password theirsystemWhen you look at your configuration file, the passwords will be encrypted, and the display will look similar to the following:
hostname Adaminterface serial 0encapsulation pppppp authentication chapusername Eve user-maxlinks 5 password 7 121F0A18Related Commands
