Embedded Menu Manager with external authentication server

[Cory Anderson]

Has anyone had any luck using the Embedded Menu Manager and authenticating with RADIUS?  I'm having no luck.

[Joe Clarke · Accepted solution]

This won't work as EMM is based on tclsh, and tclsh doesn't play well with AAA.  EMM as a feature is deprecated as well.  I agree it was quite nice in terms of what it can do, but you can do quite a bit of that using EEM (with some extra code work), and those scripts will play nicely with AAA.

[Cory Anderson]

Thanks Joe,

What they're trying to do is give certain groups of users a menu when they log into a device.  Other users will get the cli.  I'm not sure where to start on this with eem.

[Joe Clarke]

Sounds like you need TACACS+ for this and push down an autocommand to run for those users.  Something like https://blog.initialdraft.com/archives/57/ .  The command pushed could be "autocommand event manager run POLICY_NAME" where POLICY_NAME creates your menu.  Yes, you can do this with EMM as well, but then you'll run into issues with command execution if you're using AAA command authz.