<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'><div>> Frank Cui wrote:<br>> > I have tested to change the user config file to be :<br>> > <br>> > cisco Auth-Type := System<br>> > Service-Type = NAS-Prompt-User,<br>> > Cisco-AVPair = "shell:priv-lvl=15",<br>> > Session-Timeout = 20<br>> <br>> Which is 20 seconds. Probably not what you want.<br><br></div><div>Yeh, I actually explicitly set it to be a short time so that I can test this.</div><div><br></div><div>> > But it doesn't seem to resolve the problem, not sure if the Cisco<br>> > terminal server requires any special configs other than the following :<br>> > <br>> > aaa new-model<br>> > aaa authentication login default group radius local none<br>> > aaa authorization exec default group radius if-authenticated <br>> > aaa accounting exec default start-stop group radius<br>> > aaa accounting network default start-stop group radius<br>> > aaa accounting connection default start-stop group radius<br>> <br>> The NAS might not pay attention to Session-Timeout. NASes are like<br>> that...<br><br>Should all the radius clients support all these well known Attribute VPs ?<br><br>Thanks</div><div>Frank</div> </div></body>
</html>