Stefan Winter wrote: > Don't know if this is an issue for you, but: Cisco equipment does not > support command authorization via RADIUS (*any* RADIUS...) [for pure > business greed reasons]. So if you really need per-command > authorization, you'll have to stick with TACACS+ which, sadly, is well > catered by ACS.
There's a tacp2rad program which hasn't been maintained... but it works. Adding that to the FreeRADIUS portfolio wouldn't be hard, if there was a demand for it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

