UNSOLVED
JV
james.vinson
5 Posts
0
9284
November 29th, 2017 11:00
N-Series switches and RADIUS Configuration
I've been racking my brain against this for awhile. I saw a new post that was kind of what I was looking for but ended up not being it.
I have two groups of users. One being Engineers and another being Support. I have a NPS setup where the engineers are logging in with shell:priv-lvl=15 and I have my support group authenticating at shell:priv-lvl=1. However both groups are able to log in with full control of either of my N2048Ps or N4064Fs.
Is this even possible to do on this platform?
Thank you for any help you can provide! I will attach a link to the guide I used once I can find it again lol.
7833
0
Posted November 30th, 2017 08:00
This is all of the config I have been using.
aaa authentication login "CORADIUS" radius local
radius-server host auth 10.0.35.47
name "Default-RADIUS-Server"
key 7 "longandinsanepasswordthatisn'teventhis"
exit
line console
exec-timeout 5
exit
line ssh
exec-timeout 5
login authentication CORADIUS
exit
ip ssh serverradius-server source-interface vlan 3
7833
0
Posted November 30th, 2017 11:00
I don't have an enable password set on these. They just go from exec to priv exec on both profiles.
We are on 6.3.3.9.
james.vinson
5 Posts
7833
0
Posted November 30th, 2017 08:00
Yeah I tried 7 already. It still let full functionality in.