[c-nsp] Problem with "username xxx privilege 15"

[Dennis Peng]

If AAA is enabled, you have to configure:

aaa authorization exec default local

Authorization applies the per-user attributes such as privilege-level.

Dennis

Bob Tinkelman [bob at tink.com] wrote:
> I tried to set up a username with "privilege 15" for the first time
> recently, after upgrading some of our routers from 12.2 to 12.3.
> 
> I must be doing something wrong; hopefully it's obvious.
> 
> Any advice would be appreciated.
> 
> | gw1.nycmnybs#config term
> | Enter configuration commands, one per line.  End with CNTL/Z.
> | gw1.nycmnybs(config)#username test15 privilege 15 secret test15
> | gw1.nycmnybs(config)#^Z
> | gw1.nycmnybs#
> | gw1.nycmnybs#sho run int l0 | inc ip addr
> |  ip address 199.224.0.245 255.255.255.255
> | gw1.nycmnybs#
> | gw1.nycmnybs#telnet 199.224.0.245
> | Trying 199.224.0.245 ... Open
> | 
> | 
> | User Access Verification
> | 
> | Username: test15
> | Password: 
> | 
> | gw1.nycmnybs>sho priv
> | Current privilege level is 1
> | gw1.nycmnybs>config term
> |                 ^
> | % Invalid input detected at '^' marker.
> | 
> | gw1.nycmnybs>sho ver
> | Cisco Internetwork Operating System Software 
> | IOS (tm) 7200 Software (C7200-JK9O3S-M), Version 12.3(10), RELEASE SOFTWARE (fc)
> | Copyright (c) 1986-2004 by cisco Systems, Inc.
> | Compiled Mon 16-Aug-04 23:46 by kellythw
> ...
> 
> --
> Bob Tinkelman <bob at tink.com>
> ISPnet, Inc.    718.464.4747
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/