Assigning privileges on ASA with RADIUS

[misha_bac]

Hello. I'm using ASA 5510 8.2, ACS 4.2 for windows and RADIUS for auth.

I would like to assign priv level to user on logon. Docs says that I have to send Cisco VAS CVPN3000-Privilege-Level (id is 220), but I can't see this option in Interfaces configuration.

How do I set this attribute in ACS? Maybe somehow i can manually specify VAS?

Thank you.

[Javier Henderson · Accepted solution]

You can control the maximum privilege level with that AV pair, but you cannot assign a privilege level upon login like you can do with exec authorization on IOS.