Hi everyone
I got my cisco router authentication working OK, i can get access to my cisco
router with full privilege sendind "cisco-av-pair = shell:priv-lvl=15" from the
freeradius server.
I configured the "parser view" configuration in the router, to give some
different commands to different kind of users, but i don't know what parameter
or variable send from the freeradius server to achieve the parser configuration.
Thanks in advice.
Cisco Router Parser Configuration:
parser view Connectivity
secret 5 $1$z4It$J33phdP
commands configure include all line
commands configure include-exclusive all route-map
commands configure include-exclusive all snmp-server
commands configure include-exclusive all dialer-list
commands configure include all access-list
commands configure include-exclusive all ip prefix-list
commands configure include all ip route
commands configure include all ip access-list
commands configure include-exclusive all router
commands configure include all interface
commands configure include-exclusive all dlsw
commands configure include-exclusive all source-bridge
commands configure include-exclusive all policy-map
commands configure include-exclusive all class-map
commands configure include-exclusive all chat-script
commands configure include ip
commands configure exclude crypto
...
parser view Security
secret 5 $1$UJcb$JREJYEXQ3Jn
commands interface include all crypto
commands configure include ip access-list log-update
commands configure include ip access-list logging
commands configure include ip access-list extended
commands configure include ip access-list standard
commands configure include ip access-list resequence
commands configure include ip access-list
commands configure include ip
commands configure include all crypto
commands configure include no ip access-list log-update
commands configure include no ip access-list logging
commands configure include no ip access-list extended
commands configure include no ip access-list standard
commands configure include no ip access-list resequence
commands configure include no ip access-list
commands configure include no ip
commands configure include all no crypto
commands configure include no
commands exec include all crypto
...
_________________________________________________________________
Hotmail: Free, trusted and rich email service.
https://signup.live.com/signup.aspx?id=60969-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
