topic Per-device/per-user AAA authorization with Freeradius in Network Access Control

Per-device/per-user AAA authorization with Freeradius

Olivier ARRIGHI — Mon, 11 Mar 2019 03:39:09 GMT

Hi Folks

I'm using a Freeradius with local username database (no LDAP) for authentication.(working well)

I have various network devices in my network, and I would like to have custom authorization per user per device :

I would like to have 2 types of network admins, and 2 types of network devices, with the following rules :

-"Core devices" must be granted privilege level 15 for "Core admins"

-"Access devices" must be granted privilege level 15 for "Access admins" and "Core admins"

-"Core devices" must be granted privilege level 1 for "Access admins".

-There is now way "Access admins" can access to configuration mode on "Core devices" with enable command.

Any help and config example for freeradius and cisco side are very welcome

thanks

olivier

Ravi Singh — Thu, 01 Aug 2013 01:59:18 GMT

Hello Olivier,

I would like to suggest you to go to the below link . This document describes the procedure for Per-device user authentication.

Hope this may help you

Olivier ARRIGHI — Thu, 01 Aug 2013 02:21:00 GMT

Hi Ravi

thanks for the URL, however this document does not indicate how to authorize per device AND per user.

have fun

olivier