topic Re: User privilege level with Radius in Network Security

User privilege level with Radius

gunnydaman — Wed, 05 Aug 2020 16:49:03 GMT

Hello all,

Currently I have several switches (IOS and Nexus) which use RADIUS for login. The RADIUS server is a Windows server and uses Active Directory authentication. I would like to assign the active directory users different privilege levels on the switch. By default, all users in my admin group have privilege level 15 and can do everything on the switches. I would like to set some of them to use a lower privilege level so they can only do simple things like Port Security, assign a port to a vlan, etc.

Can some one explain how this can be done or send me a hyperlink to the appropriate Cisco instructions so I can read up on it myself.

Thanks,

Matt

Re: User privilege level with Radius

Mohammed al Baqari — Wed, 05 Aug 2020 17:22:05 GMT

Here are some useful examples

http://technologyordie.com/cisco-privilege-level-access-with-radius-and-nps-server
https://mrickert.com/2017/08/03/authenticate-ad-users-on-cisco-switches-through-radius/

**** please remember to rate useful posts

Re: User privilege level with Radius

gunnydaman — Fri, 07 Aug 2020 16:02:51 GMT

Thanks,

After doing some research into the matter, I realized the LDAP portion of it doesn't matter as I was able to lock users down with a local privilege using a unique login for the used level.

Re: User privilege level with Radius

Kangalala — Fri, 25 Jul 2025 09:06:36 GMT

How did you manage to solve it with the local user

Re: User privilege level with Radius

MHM Cisco World — Sat, 26 Jul 2025 09:48:55 GMT

Make new post please

MHM