Cisco Parser View

Siryx XL djsiryx at hotmail.com
Fri Feb 19 23:53:14 CET 2010


Hi everyone

I got my cisco router authentication working OK, i can get access to my cisco router with full privilege sendind "cisco-av-pair = shell:priv-lvl=15" from the freeradius server.

I configured the "parser view" configuration in the router, to give some different commands to different kind of users, but i don't know what parameter or variable send from the freeradius server to achieve the parser configuration.

Thanks in advice.


Cisco Router Parser Configuration:

parser view Connectivity 
 secret 5 $1$z4It$J33phdP
 commands configure include all line
 commands configure include-exclusive all route-map
 commands configure include-exclusive all snmp-server
 commands configure include-exclusive all dialer-list
 commands configure include all access-list
 commands configure include-exclusive all ip prefix-list
 commands configure include all ip route
 commands configure include all ip access-list
 commands configure include-exclusive all router
 commands configure include all interface
 commands configure include-exclusive all dlsw
 commands configure include-exclusive all source-bridge
 commands configure include-exclusive all policy-map
 commands configure include-exclusive all class-map
 commands configure include-exclusive all chat-script
 commands configure include ip
 commands configure exclude crypto
 ...

parser view Security
 secret 5 $1$UJcb$JREJYEXQ3Jn
 commands interface include all crypto
 commands configure include ip access-list log-update
 commands configure include ip access-list logging
 commands configure include ip access-list extended
 commands configure include ip access-list standard
 commands configure include ip access-list resequence
 commands configure include ip access-list
 commands configure include ip
 commands configure include all crypto
 commands configure include no ip access-list log-update
 commands configure include no ip access-list logging
 commands configure include no ip access-list extended
 commands configure include no ip access-list standard
 commands configure include no ip access-list resequence
 commands configure include no ip access-list
 commands configure include no ip
 commands configure include all no crypto
 commands configure include no
 commands exec include all crypto
 ...
 		 	   		  
_________________________________________________________________
Hotmail: Free, trusted and rich email service.
https://signup.live.com/signup.aspx?id=60969
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20100219/6f7d5831/attachment.html>


More information about the Freeradius-Users mailing list