Cisco Cisco IOS Software Release 12.2(27)SBC

The Shell-Based Authentication of VPDN Users feature allows the network access server (NAS) and 
tunnel server to be configured to perform shell-based authentication of virtual private dialup network 
(VPDN) users. Shell-based authentication of VPDN users provides terminal services (shell login or exec 
login) for VPDN users to support rollout of wholesale dial networks. Authentication of users occurs via 
shell or exec login at the NAS before PPP starts and the tunnel is established.

A character-mode login dialog is provided before PPP starts, and the login dialog supports schemes such 
as token-card synchronization and initialization, and challenge-based password. After a user is 
authenticated in this way, the connection changes from character mode to PPP mode to connect the user 
to the desired destination. The authentication, authorization, and accounting (AAA) server that 
authenticates the login user can be selected based on the Dialed Number Identification Service (DNIS) 
or the domain-name part of the username.

VPDN profiles can be kept by a Resource Pool Manager Server (RPMS), or RADIUS-based AAA server, 
or on the NAS.

Configuration information is included in the “Configuring AAA for VPDNs” module in the 

, Release 12.4T, at the following URL:

This section documents modified commands.