Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Users might experience few discrepancies in Search results. We are working on this on our side. We apologize for the inconvenience it may have caused.
New Member

3850 wlc and lobby admin privileges

Hi,

I've been testing a  couple of new 3850 and came across strange behavior with lobby admin configuration. With fresh config and no aaa new-model it runs as expected. Lobby admin has limited priviledges and can add/modify only guest users. But after configuring aaa new-model lobby has same privileges as any other regular user locally configured (based on privilege level). Ex. If lobby-admin is set with priv 15, he can access everything. Should lobby-admin type users be somehow configured with aaa authorization command? Could someone verify it for me?

My cfg:

aaa new-model

aaa authentication login default local

aaa authentication login webauth local

aaa authorization exec default local

aaa authorization network default local

aaa authorization network webauth local

aaa authorization credential-download default local

user-name lobby

creation-time 1373627906

privilege 15

password 0 xxxxx

type lobby-admin

Best regards,

Lukasz J.

4 REPLIES
Cisco Employee

Re: 3850 wlc and lobby admin privileges

Lukasz,

Let me check this out. What ios are you running?

Sent from Cisco Technical Support iPhone App

New Member

Re: 3850 wlc and lobby admin privileges

Hi,

Latest available:

3.2.2SE

Cisco Employee

3850 wlc and lobby admin privileges

Note that we have a bug filed for this:

CSCui383033850 5760 Lobby ambassador requires admin Priv 15 to login

New Member

Any update on this?

Any update on this?

1306
Views
0
Helpful
4
Replies
CreatePlease to create content