topic Re: cisco 4.2 radius command authorization in Network Access Control

cisco 4.2 radius command authorization

saxenanitesh8522 — Mon, 11 Mar 2019 00:48:07 GMT

Hi,

I am trying to do command authorization in radius. I have searched but i couldnt get any luck.

Is it possible to do this? if any yes can anyone tell me the steps. i would be great.

Thanks,

PAUL GILBERT ARIAS — Mon, 07 Feb 2011 15:12:33 GMT

Hello,

As far as I know command authorization is not supported on IOS.

Here is what you will get on a Cisco Switch for example if you try to do that:

SW_1(config)#aaa authorization commands 0 AUTO group ?

WORD Server-group name

tacacs+ Use list of all Tacacs+ hosts.

SW_1(config)#aaa authorization commands 0 AUTO group

As you can see only TACACS+ is supported, not Radius.

I hope this helps.

Jatin Katyal — Wed, 09 Feb 2011 00:34:22 GMT

IOS does support command authorization, however, only with TACACS (updated by paul)

very Nice configuration example on command authorization with tacacs

Rgds, Jatin

Do rate helpful posts~

PAUL GILBERT ARIAS — Wed, 09 Feb 2011 00:54:20 GMT

that's what I meant but I wrote it incorrectly. Only Tacacs

Thanks for the aid.