now i can logon into the switch but i can with all USERS. Where i can specify who can access to the switch? I add a rown in the USERS file "user Auth-Type := Reject" but nothing change. thanks Marco Marco Aresu On 23 July 2013 10:06, Martin Kraus <lists_mk@wujiman.net> wrote:
On Mon, Jul 22, 2013 at 04:27:30PM +0200, Marco Aresu wrote:
i am getting some problem with authorization in free radius i configured the users file as below :
DEFAULT Auth-Type := System cisco Auth-Type := System Service-Type = NAS-Prompt-User cisco-avpair = "shell:priv-lvl=15",
If all you want is enable mode after login then send just
Service-Type := Administrative-User
and don't send the cisco-avpair at all.
mk - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html