Christopher Tighe wrote:
>
> how do you configure a tacacs server to provide authentication
> for a cisco router for enable (privilaged) mode.
> for normal login it is okay and works fine, but in enable
> mode I receive the following error message:
>
> I think I need to define some special user in my tacacs passwd
> file, but I can't find any reference to that so how do I do
> it? Please help, I am getting desperate.....
Yes, you do need to define a special user.
You need to create a user called "$enable$" for the default enable.
For other privilege levels create users of the form "$enab<n>$"
where <n> is the privilege level.
For example
user = $enable$ {
login = <password stuff>
}
user = $enab9$ {
login = <password stuff>
}
--
Mark Krause UUNET Technologies, Inc. http://www.uu.net/
Senior Security Engineer 3060 Williams Drive
mkrause @
uu .
net Fairfax, VA 22031-4648 USA
Tel: +1 703 208 5349 Fax: +1 703 206 5493
PGP Key fingerprint = CD CE 5F C2 DD 7A A6 A3 11 8C 9D 05 48 DA 4F 18
References:
-
Tacacs+
From: Christopher Tighe <ctighe @
dat .
tds .
de>
|
|
