Re: radius for cisco management

[German Garay]

Thanks!!

2007/10/8, [EMAIL PROTECTED] [EMAIL PROTECTED]:

 http://wiki.freeradius.org/Cisco

 Ivan Kalik
 Kalik Informatika ISP


 Dana 8/10/2007, German Garay [EMAIL PROTECTED] piše:

 Hi
I want to do per user command authorization in a cisco network to
 replace a tacacs+ server. But I can´t find a how to in a page, can you
 send
 me the link?
 
 Thanks
 
 Germán
 
 

 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

radius for cisco management

[German Garay]

Hi
   I want to do per user command authorization in a cisco network to
replace a tacacs+ server. But I can´t find a how to in a page, can you send
me the link?

Thanks

Germán
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: radius for cisco management

[tnt]

http://wiki.freeradius.org/Cisco

Ivan Kalik
Kalik Informatika ISP


Dana 8/10/2007, German Garay [EMAIL PROTECTED] piše:

Hi
   I want to do per user command authorization in a cisco network to
replace a tacacs+ server. But I can´t find a how to in a page, can you send
me the link?

Thanks

Germán



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: radius for cisco management

[Phil Mayers]

On Mon, 2007-10-08 at 17:00 -0300, German Garay wrote:
 Hi
I want to do per user command authorization in a cisco network
 to replace a tacacs+ server. But I can´t find a how to in a page, can
 you send me the link? 

Can't be done.

The best you can do is use Radius to assign a privilege level, and bind
the commands to a privilege, but you cannot do per-command auth. That's
a TACACS-only feature.

See:

http://marc.info/?l=cisco-nspm=118188387413537w=2





-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html