Hi all!
I have read a lot of manual, example and post, but I still don't know
what is the solutions.
I have newest freeradius, and cisco devices(now AP).
I want the user authentication to the cisco device by fr,
It works,
I configure the users file like this:
test Cleadtext-Password := "test"
Service-Type = NAS-Prompt-User,
cisco-avpair = "shell:priv-lvl=15"
The user get the level what i set.
The enable level ( $enalXX$) works too.
But don't know how can I set the command authorization, on the
freeradius and cisco.
The cisco commands what I set:
aaa group server radius Radius-Servers
server 10.10.10.10 auth-port 1812 acct-port 1813
aaa authentication login default group Radius-Servers
aaa authentication enable default group Radius-Servers enable
aaa authorization console
aaa authorization exec default group Radius-Servers if-authenticated
aaa authorization network default group Radius-Servers if-authenticated
aaa session-id common
In fact, at first time I just want set show running-config but
disable configure command.
using privilege levels is not good, both commands are on the same
level(15).
What is the solutions?
I don't want use 2 server (tacacs+ and fr) for this.
I saw something tacacs+ integration into freeradius but I don't know
this is a good solution, an how can I configure.
Thank you,
Best regards
Gabor
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
