aaa authentication enable default group radius enable

[WILLIAM STEGMAN]

I place the above command on my switch (2950 IOS 12.1.22), but how do I tie the password back to my radius server? As I understand it, the $enable15$ user account is used when configuring your enable login to use a radius/tacacs server, but where/how is the password set? I'm using Microsoft's IAS.

thank you,

Bill

[vasthorvak]

Bill,

First I would recommend that you upgrade the code. Secondly this command tells it to check the radius account for the user it is logging into. So you should be able to define within IAS what privilege level a user should have within its account. I know you can do this within Cisco ACS but I am not familiar with IAS.

[rlemaste]

I'm working on a similar problem and just found Cisco documentation that said that the radius method doesn't work on a per-username basis for privileged mode access. I'm going to disable authentication at Enable and try to use Radius for authorization.