topic Radius attributs in Network Access Control

Radius attributs

cedric.liegeois — Mon, 11 Mar 2019 01:16:09 GMT

Hello,

We would like to backup our configuration of cisco ASA 5550.

We would like to know the attribut to give privilege 15 for the shell command in Radius.

We tried

- cisco-avpair : shell:priv-lvl=15

- cisco-avpair : shell:Admin*Admin

in the radius configuration but it doesn't work.

The connection is ok but we haven't the privilege 15.

Can you give us the good attribut to connect user in the enable shell in the cisco asa?

We thank you in advance.

LIEGEOIS Cédric

IT Security

alex.dersch — Thu, 04 Aug 2011 20:51:23 GMT

Hi Cedric,

did you configure the ASA for command authrization?

aaa authorization command LOCAL

aaa authorization exec authentication-server

alex.dersch — Thu, 04 Aug 2011 20:52:32 GMT

You might need also this command.

aaa authentication enable console LOCAL

cedric.liegeois — Fri, 05 Aug 2011 08:02:41 GMT

Alex,

Thanks for your reponses.

This is my configuration for the aaa configuration:

and for the aaa-server:

The user can connect but it is in the normal mode. I try to connect my user directly in the exec mode.

The server is a radius server.

Thank you in advance.

LIEGEOIS Cédric