>Добрый день!
>Умные люди помогите пожалуйста. Ситуация такая.
>Есть Циска и GHU radius на Unix.Авторизация через GHU radius естественно. Нужно
>сделать чтобы GNU radius в зависимости от введенного имени пользователя и
>пароля на циске раздавал разные привелегии от 1 до 15 автоматически.
>Как это возможно, и где что прописать? http://www.ibm.com/developerworks/library/l-radius/index.html
в частности :
Configuring the user for authorization
The following authentication server attribute value (AV) pair should be configured for user authorization. It is returned to the NAS for an administrator login request after authentication is accepted.
For a Cisco router, there are different privilege levels:
* Level 1 is non-privileged. The prompt is router>, the default level for login.
* Level 15 is privileged. The prompt is router#, the level after going into enable mode.
* Levels 2 through 14 are not used in a default configuration.
The following command causes a user logging in from a network access server to have immediate access to EXEC commands:
cisco-avpair ="shell:priv-lvl=15"
The following code handles the same task for a Cisco wireless access point:
Cisco:Avpair = "aironet:admin-capability=write+snmp+ident+firmware+admin"
Any combination of capabilities is returned with this attribute:
Cisco:Avpair = "aironet:admin-capability=ident+admin"
Cisco:Avpair = "aironet:admin-capability=admin"
Contact Cisco for more information on these commands.
Вариант для распечатки
Маршрутизаторы CISCO и др. оборудование. (Public)
(??) on 31-Июл-08, 14:21 
