I had the same issue. The issue is with your Radius authentication server. IT needs to pass back to the Cisco device the login level. check out this article. It helped me fix my issue. http://blog.skufel.net/2012/06/how-to-integrating-cisco-devices-...