[c-nsp] local privilege level question

Daniele Orlandi daniele at orlandi.com
Tue Jan 11 17:41:55 EST 2011


On Tuesday 11 January 2011 21:58:10 Greg Whynott wrote:
> hello,
> 
> on an ASR1004 we have local accounts where the privilege level is set to
> 15.   when I type 'en' it still asks for the enable password.   is there
> away to prevent this behavior so that persons with local accounts/15 priv
> can execute level 15 commands without being prompted?
> 
> we are not using any external sources for authentication,  its all local.

Hi Greg,

Try enabling "aaa authorization exec default local none" because the privilege 
is assigned in authorization phase.

Ciao,

-- 
  Daniele "Vihai" Orlandi
  Bieco Illuminista #184213


More information about the cisco-nsp mailing list