AAA and 2950 switch

[arevaloj]

Hello,

I'm setting up aaa authentication via radius on 2950 switches. I have 'aaa authorization exec radius local' in the config to allow privilege access upon successful auth. It works for vty but for con 0, it only brings me to user access level. Is this something that is just specific to console port? I think I remember something I came across a long time ago that console will always prompt for the enable password. Can someone please verify if this is the case? If not, please advise as to what I may be doing wrong. Thanks.

JA

[Richard Burts]

You are correct that by default Cisco does not do authorization on the console port. This is done as a protection to make it more difficult for a misconfiguration to lock you out of the device. So your memory was correct.

HTH

Rick