<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
--></style>
</head>
<body class='hmmessage'>
Hi everyone<br><br>I got my cisco router authentication working OK, i can get access to my cisco router with full privilege sendind "cisco-av-pair = shell:priv-lvl=15" from the freeradius server.<br><br>I configured the "parser view" configuration in the router, to give some different commands to different kind of users, but i don't know what parameter or variable send from the freeradius server to achieve the parser configuration.<br><br>Thanks in advice.<br><br><br>Cisco Router Parser Configuration:<br><br>parser view Connectivity <br> secret 5 $1$z4It$J33phdP<br> commands configure include all line<br> commands configure include-exclusive all route-map<br> commands configure include-exclusive all snmp-server<br> commands configure include-exclusive all dialer-list<br> commands configure include all access-list<br> commands configure include-exclusive all ip prefix-list<br> commands configure include all ip route<br> commands configure include all ip access-list<br> commands configure include-exclusive all router<br> commands configure include all interface<br> commands configure include-exclusive all dlsw<br> commands configure include-exclusive all source-bridge<br> commands configure include-exclusive all policy-map<br> commands configure include-exclusive all class-map<br> commands configure include-exclusive all chat-script<br> commands configure include ip<br> commands configure exclude crypto<br> ...<br><br>parser view Security<br> secret 5 $1$UJcb$JREJYEXQ3Jn<br> commands interface include all crypto<br> commands configure include ip access-list log-update<br> commands configure include ip access-list logging<br> commands configure include ip access-list extended<br> commands configure include ip access-list standard<br> commands configure include ip access-list resequence<br> commands configure include ip access-list<br> commands configure include ip<br> commands configure include all crypto<br> commands configure include no ip access-list log-update<br> commands configure include no ip access-list logging<br> commands configure include no ip access-list extended<br> commands configure include no ip access-list standard<br> commands configure include no ip access-list resequence<br> commands configure include no ip access-list<br> commands configure include no ip<br> commands configure include all no crypto<br> commands configure include no<br> commands exec include all crypto<br> ...<br> <br /><hr />Hotmail: Free, trusted and rich email service. <a href='https://signup.live.com/signup.aspx?id=60969' target='_new'>Get it now.</a></body>
</html>