AAA Default Authenticated Role - LIMITED -NEXUS

[t3chH0und]

Cisco NXOS 9.2(2)

Nexus 3500

Hello,

I have been working on setting up Radius Auth for my Cisco devices. The Catalysts were pretty easy, however, I am having major issues with my Nexus devices.

After many hours of searching and reading, below is the configuration I have added to my switch. I  have the ability to login via my Radius server (Microsoft). However, once logged in, I have very little rights to do anything. I need network-admin rights. I have attempted to change the default aaa user, create a user, etc. to no avail. What am I missing here?

Any help would be greatly appreciated.

1. interface mgmt0                                         

description Link_T0_Mgmt0

vrf member management

IP address 10.10.10.8/19

1. interface Ethernet1/1

  description Link_T0_Mgmt0

  spanning-tree port type normal

  spanning-tree bpduguard enable

1. aaa authentication login default group radius

aaa authentication login console group radius

1. radius-server host 10.10.10.7 key 7 "J0hK@tc3j!" authentication accounting

radius-server host 10.10.10.8 key 7 "J0hK@tc3j!" authentication accounting

1. aaa group server radius radius

use-vrf management

source-interface mgmt0

[balaji.bandi · Accepted solution]

try the below options :

https://layer77.net/2018/03/17/using-microsoft-nps-and-radius-authentication-server-for-cisco-nexus-devices/

https://networkengineering.stackexchange.com/questions/67671/cisco-nexus-radius-authentication-privilege-issue