cisco 4.2 radius command authorization

[saxenanitesh8522]

Hi,

I am trying to do command authorization in radius. I have searched but i couldnt get any luck.

Is it possible to do this? if any yes can anyone tell me the steps. i would be great.

Thanks,

[PAUL GILBERT ARIAS]

Hello,

As far as I know command authorization is not supported on IOS.

Here is what you will get on a Cisco Switch for example if you try to do that:

SW_1(config)#aaa authorization commands 0 AUTO group ?

  WORD     Server-group name

  tacacs+  Use list of all Tacacs+ hosts.

SW_1(config)#aaa authorization commands 0 AUTO group

As you can see only TACACS+ is supported, not Radius.

I hope this helps.

[Jatin Katyal]

IOS does support command authorization, however, only with TACACS (updated by paul)

very Nice configuration example on command authorization with tacacs

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml#backinfo

Rgds, Jatin

Do rate helpful posts~

[PAUL GILBERT ARIAS]

that's what I meant but I wrote it incorrectly. Only Tacacs

Thanks for the aid.