<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: Verdana; font-size: 10pt; color: #000000'>And you can easily disable the account and enable it when required (if 24hr/7day/wk access is not required). If you had to create a local account on each router and a security issue arose, bad news.<span><br><br><span name="x"></span>---<br>Lelio Fulgenzi, B.A.<br>Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1<br>(519) 824-4120 x56354 (519) 767-1060 FAX (JNHN)<br>^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^<br>Cooking with unix is easy. You just sed it and forget it. <br> - LFJ (with apologies to Mr. Popeil)<br><span name="x"></span><br></span><br><hr id="zwchr"><b>From: </b>"Go0se" <me@go0se.com><br><b>To: </b>"Jason Aarons (US)" <jason.aarons@us.didata.com>, "Mike King" <me@mpking.com>, "Cisco VoIPoE List" <cisco-voip@puck.nether.net><br><b>Sent: </b>Tuesday, January 4, 2011 10:23:01 AM<br><b>Subject: </b>Re: [cisco-voip] OT Radius authentication with a 2800 router<br><br>I don't know how many routers you would have to touch but even if there were<br>a solution it would be a pain to have to go touch each one. Simply create a<br>generic AD account and if they are worried about network/workstation access<br>don't give the account logon rights on your domain. It will still be able to<br>log into your network devices. <br> <br>Thanks,<br><br>Go0se<br><br>My blog:<br>http://atc.go0se.com<br><br>--------------------------------------------<br>Help Hopegivers International<br>Feed the orphans of Haiti and India<br>http://www.hopegivers.org<br>--------------------------------------------<br><br>-----Original Message-----<br>From: cisco-voip-bounces@puck.nether.net<br>[mailto:cisco-voip-bounces@puck.nether.net] On Behalf Of Jason Aarons (US)<br>Sent: Monday, January 03, 2011 7:03 PM<br>To: Mike King; Cisco VoIPoE List<br>Subject: Re: [cisco-voip] OT Radius authentication with a 2800 router<br><br>Correct, you need to add them to AD. The fallback method is local usually.<br><br>-----Original Message-----<br>From: cisco-voip-bounces@puck.nether.net<br>[mailto:cisco-voip-bounces@puck.nether.net] On Behalf Of Mike King<br>Sent: Monday, January 03, 2011 11:03 AM<br>To: Cisco VoIPoE List<br>Subject: [cisco-voip] OT Radius authentication with a 2800 router<br><br>Sorry for the slightly off topic question.<br><br>We've been using Radius authentication with our 2800 routers for a while,<br>but I've been handed an interesting directive.<br><br>We have a third party that will need access to our 2800 routers. I've been<br>asked to make a local account on the 2800's, as management does not want to<br>added them to the directory (Active Directory) We're using Microsoft NPS<br>(IAS for Server 2008) as a radius backend.<br><br>Unfortunately, it's been my experience, when you enable RADIUS, you cannot<br>login with local accounts unless the RADIUS server does not respond.<br><br>Am I missing an easy way to do this?<br><br>Mike<br>_______________________________________________<br>cisco-voip mailing list<br>cisco-voip@puck.nether.net<br>https://puck.nether.net/mailman/listinfo/cisco-voip<br>-----------------------------------------<br>Disclaimer:<br><br>This e-mail communication and any attachments may contain confidential and<br>privileged information and is for use by the designated addressee(s) named<br>above only. If you are not the intended addressee, you are hereby notified<br>that you have received this communication in error and that any use or<br>reproduction of this email or its contents is strictly prohibited and may be<br>unlawful. If you have received this communication in error, please notify<br>us immediately by replying to this message and deleting it from your<br>computer. Thank you.<br><br>_______________________________________________<br>cisco-voip mailing list<br>cisco-voip@puck.nether.net<br>https://puck.nether.net/mailman/listinfo/cisco-voip<br><br>_______________________________________________<br>cisco-voip mailing list<br>cisco-voip@puck.nether.net<br>https://puck.nether.net/mailman/listinfo/cisco-voip<br></div></body></html>