login user get default privilege

[kerek]

Hello,

I have played a bit with assigning different privilege level to a user, but seems not working because always get the default level assigned to the particular line.

Config:

username dummy privilege 7 password dummy

aaa authentication login enhanced local

!

line vty 1

login authentication enhanced

after login into the router through line 1 with the dummy user I get privilege level 1.

Line User Host(s) Idle Location

2 vty 0 idle 00:00:50

* 3 vty 1 dummy idle 00:00:00

router>s priv

Current privilege level is 1

Is it a bug or i have missed something?

Thanks,

Krisztian

[Edison Ortiz · Accepted solution]

You are missing the authorization piece of the AAA.

aaa authorization exec enhanced local if-authenticated

[kerek]

Hi,

Yes it is working now, but I had to add the authorization exec enhanced under the particular line.

Thanks,

Krisztian

[Jagdeep Gambhir]

Hi ,

Since you are using named method list, that is why you had to add it in particular line.

Regards,

~JG

[Pavel Bykov]

Yes, if you would use method that is named "default", you wouldn't have to configure it under the line, only in global.