AAA question

[Colin Higgins]

I always forget how to do this ...

I have AAA enabled on my routers

aaa new model

aaa authentication login default local

username **** privilege 15 password ****

but I want the user to jump right into enable mode upon authenticating. Right now, they log in, then have to type enable and enter a password

what am I missing?

[Richard Burts]

Colin

There are a couple of ways that you might accomplish what you need. The choice of which would be best depends on some things in your environment, which you would know better than we would.

- the usual way to get users directly into privilege mode is aaa authorization exec

- you can also get users directly into privilege mode by configuring privilege level 15 on the vty lines. This works ok if you want all users who login to get to privilege mode. If you want only some users directly in privilege mode then you should use aaa authorization exec.

HTH

Rick

[Collin Clark]

You can set the privilege level under the VTY lines.