Обнаружилась такая проблема:

Cisco 2811
IOS: c2800nm-adventerprisek9-mz.124-6.T.bin

На этой циске поднимаю сервер доступа.
Нужно, чтобы ip-адрес выдавался tacacs-сервером.

Все работает отлично, если адрес выдается из пула на циске.
А когда ip-адрес выдается сервером, возникает ошибка 733 (на винде).
На циске в это время вижу такую картину:

...
*Aug 16 12:01:50.697: TPLUS(000006C8)/1/NB_WAIT: wrote entire 61 bytes request
*Aug 16 12:01:50.697: TPLUS(000006C8)/1/READ: socket event 1
*Aug 16 12:01:50.697: TPLUS(000006C8)/1/READ: Would block while reading
*Aug 16 12:01:50.705: TPLUS(000006C8)/1/READ: socket event 1
*Aug 16 12:01:50.705: TPLUS(000006C8)/1/READ: read entire 12 header bytes (expect 37 bytes data)
*Aug 16 12:01:50.705: TPLUS(000006C8)/1/READ: socket event 1
*Aug 16 12:01:50.705: TPLUS(000006C8)/1/READ: read entire 49 bytes response
*Aug 16 12:01:50.705: T+: Version 192 (0xC0), type 2, seq 2, encryption 1
*Aug 16 12:01:50.705: T+: session_id 3694725485 (0xDC39096D), dlen 37 (0x25)
*Aug 16 12:01:50.705: T+: AUTHOR/REPLY status:1 msg_len:0, data_len:0 arg_cnt:2
*Aug 16 12:01:50.705: T+: msg:
*Aug 16 12:01:50.705: T+: data:
*Aug 16 12:01:50.705: T+: arg[0] size:15
*Aug 16 12:01:50.705: T+:  addr=10.24.4.14
*Aug 16 12:01:50.705: T+: arg[1] size:14
*Aug 16 12:01:50.705: T+:  inacl=BCDialIn
*Aug 16 12:01:50.705: T+: End Packet
*Aug 16 12:01:50.705: TPLUS(000006C8)/1/46A316F4: Processing the reply packet
====== До этого места все ок, а дальше возникает проблема ======
*Aug 16 12:01:50.705: TPLUS: Failed to decode AV addr=10.24.4.14 - FAIL
*Aug 16 12:01:50.709: Vi2 IPCP: Received AAA AUTHOR Response FAIL
*Aug 16 12:01:50.709: Vi2 AAA/AUTHOR/FSM: We cannot start IPCP
*Aug 16 12:01:50.737: T+: Version 192 (0xC0), type 3, seq 2, encryption 1
*Aug 16 12:01:50.737: T+: session_id 238109938 (0xE3144F2), dlen 5 (0x5)
*Aug 16 12:01:50.737: T+: ACCT/REPLY status:1 msg_len:0 data_len:0
*Aug 16 12:01:50.741: T+: msg:
*Aug 16 12:01:50.741: T+: data:
*Aug 16 12:01:50.741: T+: End Packet
*Aug 16 12:01:50.889: Vi2 AAA/AUTHOR/FSM: We cannot start IPCP
*Aug 16 15:01:51.673: %LINEPROTO-5-UPDOWN: Line protocol on Interface Async1, changed state to up
*Aug 16 15:01:51.685: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access2, changed state to up
*Aug 16 15:01:55.489: %LINK-5-CHANGED: Interface Async1, changed state to reset
*Aug 16 12:01:55.489: AAA/IPC(000006C8): Sending accounting message to AAA server pid 81
*Aug 16 15:01:55.493: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to down
...

На другой циске с более старым иосом аналогичный конфиг работает без проблем.

Подскажите, куда копать...

• cisco 2811 проблема с tacacs+,silencer, 16:31 , 16-Авг-06

А когда в настройках такакс-сервера указываю использовать пул с ААА-клиента, то дебаг получается такой:

*Aug 16 12:32:57.085: TPLUS(000006CE)/1/READ: socket event 1
*Aug 16 12:32:57.085: TPLUS(000006CE)/1/READ: read entire 12 header bytes (expect 41 bytes data)
*Aug 16 12:32:57.085: TPLUS(000006CE)/1/READ: socket event 1
*Aug 16 12:32:57.085: TPLUS(000006CE)/1/READ: read entire 53 bytes response
*Aug 16 12:32:57.085: T+: Version 192 (0xC0), type 2, seq 2, encryption 1
*Aug 16 12:32:57.085: T+: session_id 2890941127 (0xAC5042C7), dlen 41 (0x29)
*Aug 16 12:32:57.085: T+: AUTHOR/REPLY status:1 msg_len:0, data_len:0 arg_cnt:2
*Aug 16 12:32:57.085: T+: msg:
*Aug 16 12:32:57.085: T+: data:
*Aug 16 12:32:57.085: T+: arg[0] size:19
*Aug 16 12:32:57.085: T+:  addr-pool=temporary
*Aug 16 12:32:57.085: T+: arg[1] size:14
*Aug 16 12:32:57.085: T+:  inacl=BCDialIn
*Aug 16 12:32:57.085: T+: End Packet
*Aug 16 12:32:57.085: TPLUS(000006CE)/1/476F8D74: Processing the reply packet
*Aug 16 12:32:57.085: TPLUS: Processed AV addr-pool=temporary
*Aug 16 12:32:57.085: TPLUS: Processed AV inacl=BCDialIn
*Aug 16 12:32:57.085: TPLUS: received authorization response for 1742: PASS
*Aug 16 12:32:57.089: Vi2 IPCP: Received AAA AUTHOR Response PASS
*Aug 16 12:32:57.089: Vi2 PPP/AAA: Check Attr: Framed-Protocol
*Aug 16 12:32:57.089: Vi2 PPP/AAA: Check Attr: username
*Aug 16 12:32:57.089: Vi2 PPP/AAA: Check Attr: addr-pool
*Aug 16 12:32:57.089: Vi2 PPP/AAA: Check Attr: inacl: Peruser
*Aug 16 12:32:57.089: Vi2 AAA/AUTHOR/FSM: We can start IPCP
*Aug 16 12:32:57.205: Vi2 AAA/AUTHOR/IPCP: Start.  Her address 0.0.0.0, we want 0.0.0.0