Using AAA for enable mode

Jun 08, 2007 2 Replies
B

Hey guys, Here's what I'm trying to do. Use plain ole radius (technically IAS) for router and switch authentication. Basically pointing IAS to a specific user group. Catch is I want that user once authenticated to go directly in to priv exec mode. I got it authenticating fine, just can't seem to get the enable portion working. Keep having to use the local enable password. Even if they have to type their domian password again for enable thats fine, just need it via radius. Thoughts, Ideas, Possible? Thanks!



-Brian



Vote
Twitter Facebook LinkedIn
T

You need to add "service-type administrative" into the advanced tab of the ias remote access criteria. Bye, Tosh.

Vote
Twitter Facebook LinkedIn
T

Well yes, and presuming that your AAA is configured right on your devices. For routers, it should look like:

aaa authentication enable default group radius enable

For cat:

set authentication enable radius enable telnet primary

That should change your model to use radius auth for enable password, but you'll need to do some additional stuff within the radius server itself to drop you into enable from first login.

Vote
Twitter Facebook LinkedIn

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required