Hi,

I have configured aaa authentication for Cisco 1905 with Steel Belted Radius Server (Juniper) .

2 users are created  - test1 for write access and test2 for read access.

SBR returns the right attribute for write and read access respectively.

But the write access and read access works as follows:

Write access

username : xxxxx

Password:  xxxxx

Router# 

priv level is 15

Read access:

username : xxxxx

password : xxxxx

Router >

Priv level is 1.

If en entered , it will ask for enable pw ; if user has en pw ; he will get privilege level 15.

Desired output is Router >en

% Auth failed% (It should not allow to enter the enable password).

If enable pw is disabled ;

Router >en

Router#

Cisco TAC says this is the normal behaviour.

But with TACACS server, user is not able to enter conf t or en.

Please suggest.

Regards

Nimmi MP