Privilege level when accessing via telnet

[volleyman]

I've just set up telnet access using RADIUS authentication. I'm using Microsoft IAS for the radius server.

I can access the router but when I try to get into the enable prompt, it says "% Error in authentication."

I should mention that when I connect directly via console port, I can login using the radius. It doesn't drop me into an enable prompt but it allows me to enter into it by typing "enable". doesn't work for telnet however.

any ideas what I did wrong?

[michael.leblanc]

The command reference for "aaa authentication enable default" says that requests sent to a RADIUS Server will include the username "$enab15$".

Have you configured a user named "$enab15$" on the RADIUS server?

e.g.:

If you were using Cisco Secure ACS, and did not configure such a user, the log would indicate an Authentication Failure Code of "CS user unknown", and the username listed would be "$enab15$".