Hi,
In the documentation of the switch it says: "To provide each user with appropriate levels of access to the switch, set the following username attributes on your RADIUS server: - R/W access -- Set the Service-Type field value to Administrative - Read-Only -- set the Service-Type field value to NAS-Prompt"
So, in my users file, I have defined a user: "testuser" NAS-IP-Address == "172.16.8.30", Cleartext-Password := "testing", Service-Type =="Administrative-User"
"testuser" NAS-IP-Address == "172.16.8.30", Cleartext-Password := "testing", Service-Type = "Administrative-User" though if the server doesnt understand that attribute you may need to add it to the dictionary file.... however, another method to use is use one of the other modules - eg the PERL module , as part of authorization. its trivial to then check the NAS, the user and then assign/add new attributes. alan