IOS authentication with MS IAS (AAA/radius)

here is my config so far: aaa new-model aaa authentication login default group radius local aaa authentication enable default group radius ... radius-server host auth-port 1645 acct-port 1646 key 7 ******

IOS (tm) 3600 Software (C3620-I-M), Version 12.2(29), RELEASE SOFTWARE (fc3)

i am able to telnet to the router ok, and authenticate via radius using my windows domain information, but when i attempt to 'enable', i get an error. on the IAS server, in the logs, it says $enab15$ was denied access... I understand this, but what i dont understand is why isn't it using my windows username when i attempt to 'enable'. or is there a way to force it to?

any hints/help?

User Access Verification

Username: username Password: *******

Router>en Password: % Error in authentication.



Reply to
John Smith
Loading thread data ...

Hi John,

The username is fixed which is $enable15$ for enable authentication.


Brad Reese BradReese.Com Cisco Repair Service Experts

1293 Hendersonville Road, Suite 17 Asheville, North Carolina USA 28803 U.S. Toll Free: 877-549-2680 International: 828-277-7272 Website:
formatting link
Reply to
www.BradReese.Com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.