Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I need to configure some Cisco switches (IOS 12.x) to authenticate against a RADIUS server; the server is Windows Server 2003's IAS, and it validates users against his Active Directory domain.

I know how to configure the switches to validate usernames/passwords against the RADIUS server, and I can succesfully login using an AD account; the question is: how can I set privilege level 15 for users, in order to not have to use enable each time?

share|improve this question

2 Answers 2

up vote 1 down vote accepted

Have a look here: How to Assign Privilege Levels with TACACS+ and RADIUS

share|improve this answer
    
I found that soon after posting the question :-) But I'm still accepting your answer, as that page actually helped me a lot. The only difficult bit was setting "shell:priv-lvl=15" on IAS, but it can be done. –  Massimo Mar 25 '10 at 19:59

send back the cisco-av-pair attribute with a value of "shell:priv-lvl=15".

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.