Hi, you sending the wrong attributes or your switchconfig is not correct.
The switch needs for authorization only these two attributes: Service-Type := Login Cisco-AVPair := "shell:priv-lvl=15" And this is the working aaa config: aaa new-model aaa authentication login default group radius local aaa authorization exec default group radius local radius-server host 192.168.17.50 auth-port 1812 acct-port 1813 key 0 testing123 that's working on a WS-C2960-24TC-L with C2960 Software (C2960-LANBASEK9-M), Version 12.2(55)SE best regards, Max
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html