login to router

[rouzbehta]

Hello all,

I really appreciate if someone can answer my question

I would like to ask, can I enter directly to privilege exec mode instaed of log in first to the user mode and enter enable password?

My routers get authenticated via radius server,

Thank you ver much,

-Rouzbeh

[andamani]

Hi,

You definately can configure that.

EXEC AUTHORIZATION

Router

router(config)#aaa authorization exec TEL Group radius local
router(config)#line vty 0 15
router(config-line)#authorization exec TEL

ACS

Interface configuration

Check  user & group for cisco av-pair.

User setup à cisco ios/pix 6.x radius attributes àcisco av-pair [ shell:priv-lvl=15]

OR

Group setup à ios/pix 6.x radius attributes à shell:priv-lvl=15

In case of radius if exec authorization is enabled  and if have not specified any privilege level in the ACS server. Then user will fall under the privilege level 1 and if enable authentication is enabled  or enable password is defined  on the router then we can go to enable mode by typing en or en

Regards,

Anisha

P.S.: please mark this thread answered if you feel your query is resolved.

[rouzbehta]

Hello,

Sorry for late answer, we have not implemented this yet on our Network, as soon as it is done I will let you know.

Best Regards,

-Rouzbeh