> > However, this doesn't really provide any timing or grouping policy.

> > Could you please provide some hints on how typically the timing limits
> > are enforced with the freeradius and cisco terminal server?
>
> Time limits are set with the Session-Timeout attribute.

Thanks for the reply.

I have tested to change the user config file to be :

cisco Auth-Type := System

Service-Type = NAS-Prompt-User,

Cisco-AVPair = "shell:priv-lvl=15",

Session-Timeout = 20

But it doesn't seem to resolve the problem, not sure if the Cisco terminal server requires any special configs other than the following :

aaa new-model

aaa authentication login default group radius local none

aaa authorization exec default group radius if-authenticated

aaa accounting exec default start-stop group radius

aaa accounting network default start-stop group radius

aaa accounting connection default start-stop group radius

Thanks

Frank