Hi Alan, Thanks for your reply. Do you mean the below in the "users" file? cisco Auth-Type := LDAP Service-Type = Administrative-User, cisco-avpair = "shell:priv-lvl=15" Regards, /Neo On Thu, Jan 24, 2013 at 11:19 PM, <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
you need whitspace before the service-type and cisco VSA lines after your auth line (they are reply items.....not check items) - if you run in debug mode (radiusd -X or freeradius -X on some distros) you can confirm from the output that the VSA/TLV are being sent to the client (switch).
if they are, and you are stil being dumped on the basic prompt then you need to revisit the cisco docs and ensure that you have all the required AAA lines in place to allow admin/enable access after login (ie if FreeRADIUS is sending the right stuff, then its a NAS configuration issue)
alan