Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

CSS using radius authentication

How do you assign a radius authenticated user as "superuser"?

Thanks

Tom

1 REPLY
New Member

Re: CSS using radius authentication

With WebNS version 5.03, we use TACACS (not RADIUS) for login authentication (command authorization is disabled), and this provides us with superuser (#) access.

Unfortunately, even if the TACACS server denies access to the user, the CSS automatically reverts to local authentication, allowing anyone who knows the local superuser name & password to login in.

virtual authentication primary tacacs

virtual authentication secondary local

console authentication primary tacacs

console authentication secondary local

tacacs-server timeout 10

tacacs-server [ key ]

tacacs-server account config

tacacs-server [ IP ] 49

269
Views
5
Helpful
1
Replies
CreatePlease to create content