topic Re: enable mode using privilege levels in Network Access Control

enable mode using privilege levels

mchockalingam — Tue, 26 Mar 2019 00:22:54 GMT

Hi All,

We use TACACS+ for telnet access and enable secret password for privileged access. An user would like to enter the enable mode without entering the enable secret password. Is it possible to do this using privilege levels and shell exec on the AAA server?

Re: enable mode using privilege levels

Richard Burts — Wed, 16 Nov 2005 20:07:45 GMT

Meena

Yes it is possible to configure the user on the AAA server so that when they telnet to a router that they go directly into privilege mode. You configure the parameters on the AAA server and configure aaa authorization on the router. Note that by default this does work for telnet and does not work for access through the console.

HTH

Rick

Re: enable mode using privilege levels

mchockalingam — Wed, 16 Nov 2005 21:18:42 GMT

I have configured a user on AAA server and under the enable options, I have selected level 15 and under shell exec, I have selected privilege level 15.

The router has following config

aaa authorization exec default tacacs+ if-authenticated

aaa authorization commands 1 default tacacs+ if-authenticated

aaa authorization commands 15 default tacacs+ if-authenticated

Am I missing any other commands?

Re: enable mode using privilege levels

bugalde — Wed, 28 Dec 2005 14:58:45 GMT

Hello : Hoy do you implementation the access telnet in the router. I have configured a user on AAA server, but I telnet the router I put the username and password the router display error

access denied.

why ??