radius for cisco management
Hi I want to do per user command authorization in a cisco network to replace a tacacs+ server. But I can´t find a how to in a page, can you send me the link? Thanks Germán
http://wiki.freeradius.org/Cisco Ivan Kalik Kalik Informatika ISP Dana 8/10/2007, "German Garay" <german.garay@gmail.com> piše:
Hi I want to do per user command authorization in a cisco network to replace a tacacs+ server. But I can´t find a how to in a page, can you send me the link?
Thanks
Germán
Thanks!! 2007/10/8, tnt@kalik.co.yu <tnt@kalik.co.yu>:
http://wiki.freeradius.org/Cisco
Ivan Kalik Kalik Informatika ISP
Dana 8/10/2007, "German Garay" <german.garay@gmail.com> piše:
Hi I want to do per user command authorization in a cisco network to replace a tacacs+ server. But I can´t find a how to in a page, can you send me the link?
Thanks
Germán
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Mon, 2007-10-08 at 17:00 -0300, German Garay wrote:
Hi I want to do per user command authorization in a cisco network to replace a tacacs+ server. But I can´t find a how to in a page, can you send me the link?
Can't be done. The best you can do is use Radius to assign a privilege level, and bind the commands to a privilege, but you cannot do per-command auth. That's a TACACS-only feature. See: http://marc.info/?l=cisco-nsp&m=118188387413537&w=2
participants (3)
-
German Garay -
Phil Mayers -
tnt@kalik.co.yu