Role-based cli (views)
rji
Member Posts: 26 ■□□□□□□□□□
Hi,
I've been looking at Role-Based CLI (views) and have configured AAA to authenticate users against a RADIUS server (Windows NPS). I have created multiple views and using the radius attribute "shell:cli-view-name=VIEWNAME" a user is sucessfully authenticated and assigned the correct view.
My problem arises when i have telnetted into the switch and attempt to configure the views and access the root view "enable view". It attempts to authenticates the user against the radius server, which fails as the root account does not exist on the radius server. If I console into the switch it will use the local database and suceeds, no AAA configured there.
Has anybody else run into this issue before and know how to authenticate the root view account locally when AAA configured?
thanks
I've been looking at Role-Based CLI (views) and have configured AAA to authenticate users against a RADIUS server (Windows NPS). I have created multiple views and using the radius attribute "shell:cli-view-name=VIEWNAME" a user is sucessfully authenticated and assigned the correct view.
My problem arises when i have telnetted into the switch and attempt to configure the views and access the root view "enable view". It attempts to authenticates the user against the radius server, which fails as the root account does not exist on the radius server. If I console into the switch it will use the local database and suceeds, no AAA configured there.
Has anybody else run into this issue before and know how to authenticate the root view account locally when AAA configured?
thanks