This user does not have permissions for this command.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎12-16-2021 10:23 AM
Good Afternoon,
X440 connected to XMC/NAC used to autheticate the user for management login.
IF I try to connect to the switch with ssh the prompt is this :
X440_UP > and for any command I do I receive this error:
"This user does not have permissions for this command."
The problem is the connection to radius ( XMC/NAC ) but I do not know where ( I only upgraded to the last release XMC and NAC )
Thanks
Giuseppe
X440 connected to XMC/NAC used to autheticate the user for management login.
IF I try to connect to the switch with ssh the prompt is this :
X440_UP > and for any command I do I receive this error:
"This user does not have permissions for this command."
The problem is the connection to radius ( XMC/NAC ) but I do not know where ( I only upgraded to the last release XMC and NAC )
Thanks
Giuseppe
18 REPLIES 18
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎03-30-2022 05:10 PM
Sorry. It is more complex. Here is the documentation for EXOS 16.1 = https://documentation.extremenetworks.com/exos_16.1/downloads/GUID-D14940D6-7F4E-4084-A9BD-069AA223D632.pdf
What you need is the Security section, pages 951+
In general you need to authenticate the user through Radius with Extreme-CLI-Authorization = enabled.
then you will receive each command through radius request and Access-accept means the command can be executed. Access-reject means the command execution is rejected.
What you need is the Security section, pages 951+
In general you need to authenticate the user through Radius with Extreme-CLI-Authorization = enabled.
then you will receive each command through radius request and Access-accept means the command can be executed. Access-reject means the command execution is rejected.
Regards
Zdeněk Pala
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎03-30-2022 08:54 AM
Would you share example to show steps from both switch & radius server ?
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎03-30-2022 07:43 AM
The per-command authorization can be used for this purpose. The EXOS needs to be configured to request permission for each command. the Radius needs to approve/reject each command.
Regards
Zdeněk Pala
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎03-30-2022 07:32 AM
Is there a way to grant the user with read-only privilege to run "Show configuration" ? Or any equivalent command to show complete configuration ?
