How to Authorize group from AD

[Maicon Luis]

Hello people,

I’m newcomer here as well as on freeradius.

I have a environment with Radius integrated with Active directory so I can login on Cisco’s  Switches with AD account. All it’s working but I should like give privilege 15 for users that login.

I have done the follow lines on “user” file

user1
                Service-Type = NAS-Prompt-User,
                Cisco-AVPair = "shell:priv-lvl=15",
                Fall-Through = Yes

When user1 do login on cisco switch he need type “enable” more local password for enable instead your password from Active Directory

I should like when user “user1” login on Cisco Switch and type enable he earn privileges 15 directly without any password or your password from AD instead local enable password.

What I have to do for reach this ?

I’m using freeradius 3.0

Thanks.