Cisco Privilege Level

[Gerald Krause]

Am Dienstag, 20. September 2005 20:13 schrieb Ryan Sharpe:
> Hello all,
>
> I'm having a problem getting users to default to the right privilege
> level.
>
> aaa authentication login default group radius local
> aaa authorization exec default group radius local
> radius-server host xx.20.xx.xx auth-port 1645 acct-port 1646
> radius-server key 7 xxxxxxxxxxxx
> privilege exec level 2 enable
>
> DEFAULT Group == "radiusfull", Auth-Type = System
>         CiscoAVPair = "shell:priv-lvl=2",
>         Fall-Through = No
> DEFAULT Group == "radiusview", Auth-Type = System
>         CiscoAVPair = "shell:priv-lvl=1",
>         Fall-Through = No
...
> I also did a packet capture of the communication between 
> the two devices and I did no see any of the AVPairs in the packet data. 
> If someone could help and enlighten me that would be great. THANKS!

Maybe you should use "Cisco-AVPair" instead of "CiscoAVPair"? Or is 
"CiscoAVPair" in one of your dictionaries?


 --Gerald