Hi everyone

I got my cisco router authentication working OK, i can get access to my cisco router with full privilege sendind "cisco-av-pair = shell:priv-lvl=15" from the freeradius server.

I configured the "parser view" configuration in the router, to give some different commands to different kind of users, but i don't know what parameter or variable send from the freeradius server to achieve the parser configuration.

Thanks in advice.


Cisco Router Parser Configuration:

parser view Connectivity
 secret 5 $1$z4It$J33phdP
 commands configure include all line
 commands configure include-exclusive all route-map
 commands configure include-exclusive all snmp-server
 commands configure include-exclusive all dialer-list
 commands configure include all access-list
 commands configure include-exclusive all ip prefix-list
 commands configure include all ip route
 commands configure include all ip access-list
 commands configure include-exclusive all router
 commands configure include all interface
 commands configure include-exclusive all dlsw
 commands configure include-exclusive all source-bridge
 commands configure include-exclusive all policy-map
 commands configure include-exclusive all class-map
 commands configure include-exclusive all chat-script
 commands configure include ip
 commands configure exclude crypto
 ...

parser view Security
 secret 5 $1$UJcb$JREJYEXQ3Jn
 commands interface include all crypto
 commands configure include ip access-list log-update
 commands configure include ip access-list logging
 commands configure include ip access-list extended
 commands configure include ip access-list standard
 commands configure include ip access-list resequence
 commands configure include ip access-list
 commands configure include ip
 commands configure include all crypto
 commands configure include no ip access-list log-update
 commands configure include no ip access-list logging
 commands configure include no ip access-list extended
 commands configure include no ip access-list standard
 commands configure include no ip access-list resequence
 commands configure include no ip access-list
 commands configure include no ip
 commands configure include all no crypto
 commands configure include no
 commands exec include all crypto
 ...

---

Hotmail: Free, trusted and rich email service. Get it now.