I am looking for a way to give different access level to cisco router based on unix group membership. I went through the documentation but could not find a simple (or other) way to do this.

Got a bit confused when it came to which (if at all) modules I need to include. I tries using the hungroup file but that did not work.

Here is my users config file which will explain what I am trying to achieve

So if a user is a member of “sysops” the access level they would get is 3 and if they are a member “netops” they will get access level 15.

DEFAULT Auth-Type := System

Fall-Through = Yes,

Group == "sysops",

Service-Type = NAS-Prompt-User,

cisco-avpair = "shell:priv-lvl=3",

# Huntgroup-Name == "SysOps"

DEFAULT Auth-Type := System

Group == "netops",

Service-Type = NAS-Prompt-User,

cisco-avpair = "shell:priv-lvl=15"

I also tried to define those two hungroups and use the Hungroup but is did not do what I expect it to do.

NetOps NAS-IP-Address == xx.xx.xx.0, Group = netops

SysOps NAS-IP-Address == xx.xx.xx.0, Group = sysops

When a netops user or a sysops user login to the router they always get the first level in the users file.

Will appreciate any help.

I can also add the debug output if you think it will help.

Thanks

Elad