All, Newbie ish question.. I would like to use FreeRadius to authorize cli users for specific commands entered on my cisco routers. I can set up my cisco's to look to radius for command authorization using the "aaa authorization commands 1 default group radius ..." string, but im unclear how i need to prepare/configure the radius server side. Is there an example of command authorization somewhere , or could someone point me in the right direction?
I use FreeRadius Version 1.0.0-pre3 on solaris, flat files for logging + clients. My test command would be to allow user JOE to run the SHOW SNMP command on router 1.2.3.4. Thanks for any direction here .. The cisco docs are excellent for the cisco side, but alas I'm missing 1/2 the puzzle.. __________________________________ Do you Yahoo!? Check out the new Yahoo! Front Page. www.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html