User privilege level with Radius

[gunnydaman]

Hello all,

Currently I have several switches (IOS and Nexus) which use RADIUS for login. The RADIUS server is a Windows server and uses Active Directory authentication. I would like to assign the active directory users different privilege levels on the switch. By default, all users in my admin group have privilege level 15 and can do everything on the switches. I would like to set some of them to use a lower privilege level so they can only do simple things like Port Security, assign a port to a vlan, etc.

Can some one explain how this can be done or send me a hyperlink to the appropriate Cisco instructions so I can read up on it myself.

Thanks,

Matt

[Mohammed al Baqari · Accepted solution]

Here are some useful examples

http://technologyordie.com/cisco-privilege-level-access-with-radius-and-nps-server
https://mrickert.com/2017/08/03/authenticate-ad-users-on-cisco-switches-through-radius/

**** please remember to rate useful posts

[gunnydaman]

Thanks,

After doing some research into the matter, I realized the LDAP portion of it doesn't matter as I was able to lock users down with a local privilege using a unique login for the used level.