enable mode using privilege levels

[mchockalingam]

Hi All,

We use TACACS+ for telnet access and enable secret password for privileged access. An user would like to enter the enable mode without entering the enable secret password. Is it possible to do this using privilege levels and shell exec on the AAA server?

[Richard Burts]

Meena

Yes it is possible to configure the user on the AAA server so that when they telnet to a router that they go directly into privilege mode. You configure the parameters on the AAA server and configure aaa authorization on the router. Note that by default this does work for telnet and does not work for access through the console.

HTH

Rick

[mchockalingam]

I have configured a user on AAA server and under the enable options, I have selected level 15 and under shell exec, I have selected privilege level 15.

The router has following config

aaa authorization exec default tacacs+ if-authenticated

aaa authorization commands 1 default tacacs+ if-authenticated

aaa authorization commands 15 default tacacs+ if-authenticated

Am I missing any other commands?

[bugalde]

Hello : Hoy do you implementation the access telnet in the router. I have configured a user on AAA server, but I telnet the router I put the username and password the router display error

access denied.

why ??