Re: Cisco Console Port Help

In addition to the FreeRadius sending the correct parameters, you also need
the correct lines in your IOS config file.

You likely already have "privilege level 15" under your "line vty x y"
config. You will also need to add that to your "line con 0" config.

line con 0
  privilege level 15

-Matt

On Fri, 18 Apr 2025 at 02:29, Timothy M Butterworth <
[email protected]> wrote:

> Hello,
>
> I have the following configuration and I am having an issue. Logging into a
> VTY line through SSH takes me immediately to enable privileged mode login.
> Logging into Console takes me to a non-privileged mode login and I have to
> enter the Enable Secret Password. How do I get the console to take me
> immediately to enable privileged mode login?
>
> ### Free RADIUS Configuration
> sudo vim /etc/freeradius/3.0/clients.conf
>
> client 10.0.0.0/8 {
> secret = REMOVED
> nastype = cisco
> shortname = Butter.net
> }
>
> ### FreeRADIUS User Config
> sudo vim /etc/freeradius/3.0/users
>
> tmb Cleartext-Password := "REMOVED"
>     Service-Type = NAS-Prompt-User,
>     Cisco-AVPair = "shell:priv-lvl=15"
>
> # FreeRADIUS group config
>
> DEFAULT Group == "cisco-rw"
>         Service-Type = NAS-Prompt-User,
>         Cisco-AVPair == 'shell:priv-lvl=15',
>         User-Name = tmb
>
> Thanks
>
> Tim
>
>
> --
> ⢀⣴⠾⠻⢶⣦⠀
> ⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
> ⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/
> ⠈⠳⣄⠀⠀
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html