AAA?

[m.matteson]

can i base authorization and priviledged level based on a windows 2000 domain account using IAS? or do i need to create a user on the router itself?

thanks

Mike

[rmiles]

i believe you should be able to. i point all of our devices to a tacacs server, but you can also point it to radius. i assume microsoft's ias would work.

you don't need to have a local user on the router. although for fear of locking myself out i have defined a local user.

[mbettis]

Yes you can. You can do some limited stuff like time of day a person can log in. It is limited.

Matt