topic Re: RADIUS & AAA Info in Network Access Control

RADIUS & AAA Info

sagittarius — Sun, 10 Mar 2019 14:22:13 GMT

Hi,

I want to configure RADIUS authentication for all the Routers.

Which RADIUS server should I use? W2K or UNIX

There should be only one user ID for each administrators, using this ID they should be able to login to all the routers, but should have different privileges on different routers.

How can I achieve this … is this possible?

Regards

Re: RADIUS & AAA Info

ywadhavk — Sat, 21 Jun 2003 15:24:05 GMT

Hi Saggi,

Unix ACS is end-of-sales and soon end-of-support. You should go for the Win2k ACS platform.

The below url, explains how to implement the privilege levels for a particular user.

http://www.cisco.com/en/US/partner/tech/tk583/tk547/technologies_tech_note09186a008009465c.shtml

Thanks,

Yatin

Re: RADIUS & AAA Info

mhoda — Wed, 02 Jul 2003 04:20:09 GMT

Hi,

W2K as suggested by the previous post. You can dowload the trial version from here -

http://www.cisco.com/cgi-bin/tablebuild.pl/acs-win-eval

Also, to address to the last part of the question, here is the procedure on ACS -

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs32/user/u.htm#186824

And along with other commands, you will need the follwing line on the router -

aaa authorization commands 0 default group tacacs+

aaa authorization commands 1 default group tacacs+

aaa authorization commands 15 default group tacacs+

Re: RADIUS & AAA Info

sagittarius — Wed, 02 Jul 2003 14:52:10 GMT

I have installed RADIUS on W2K machine, Can i configure privelege for diffrent users.

Re: RADIUS & AAA Info

ywadhavk — Wed, 02 Jul 2003 15:29:24 GMT

Hi,

You need to have TACACS+ for this.

Please see the info on the below url

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs32/user/u.htm#187076

Thanks,

yatin

Re: RADIUS & AAA Info

ywadhavk — Wed, 02 Jul 2003 15:33:36 GMT

If you are doing command authorization, then TACACS+ is required. That was what I was referring to in my last post.

For assigning privilege levels using Radius, follow this;

CiscoSecure NT RADIUS

Follow these steps to configure the server.

In the Group Settings for IETF, Service-type (attribute 6) = Nas-Prompt

In the CiscoRADIUS area, check AV-Pair, and in the rectangular box underneath, enter shell:priv-lvl=7.

As an example, priv level 7 is assigned.

Hope this helps,

yatin