I want to control access to the web interface of a CISCO router via ACS configured as a radius server. First I have configured this task with TACACS (checked "shell(exec")) - no problems with that. Users could login via telnet and http interface. Then I have changed ACS to radius, have set "[006] Service-Type" to "login" - but nothing happens. I think that some configuration steps are missing. Can someone tell me what I have to configure on ACS to allow a user to telnet a router AND to get access to the web interface? Thanks.
Thomas