Solved: Assigning privileges on ASA with RADIUS

misha_bac · ‎09-01-2010

Hello. I'm using ASA 5510 8.2, ACS 4.2 for windows and RADIUS for auth.

I would like to assign priv level to user on logon. Docs says that I have to send Cisco VAS CVPN3000-Privilege-Level (id is 220), but I can't see this option in Interfaces configuration.

How do I set this attribute in ACS? Maybe somehow i can manually specify VAS?

Thank you.

Javier Henderson · ‎09-02-2010

You can control the maximum privilege level with that AV pair, but you cannot assign a privilege level upon login like you can do with exec authorization on IOS.

View solution in original post

Javier Henderson · ‎09-02-2010

You can control the maximum privilege level with that AV pair, but you cannot assign a privilege level upon login like you can do with exec authorization on IOS.