Previous Next Table of Contents

24. What is the "route" attribute?

This attribute tells the NAS to add a dynamic route whenever the user is logged in. The route is flagged as "U" in the output of the "show ip route" command.

There are two forms. "route=172.20.0.0 255.255.0.0" advises the NAS to route the 172.20/16 net to the user if logged on. "route=172.20.0.0 255.255.0.0 10.1.1.1" adds this route just like a static route to the routing table when logged on.

This attribute is transmitted during network authorization. This means that for this to work, it has to be switched on by "aaa authorization network TACACS+".

Furthermore, it only works for incoming calls as outgoing calls are not (yet?) authorized.

With IOS 11.3 and later, you can have more than one router per user, which was not possible previously. An example for this:

user = "demouser" {
        service = ppp protocol = ip {
                route#1 = "172.20.0.0 255.255.0.0"
                route#2 = "10.1.1.0 255.255.255.0"
        }
}


Previous Next Table of Contents