asked on

Problem with Privilege levels on a Cisco 1811 running 12.4(6)T

In my config of an 1811 running version 12.4(6)T, , I have a user set up as follows:

username himom privilege 3 secret 5 <secret>

Then, in the line section, I have the following:

line vty 0 4
privilege level 15
login local
transport input ssh

Yet, when user himom connects via SSH, he gets level 3 instead of 15. The same occurs if the username definition has no privilege statement.
I can also confirm that the user is connecting to vty 0:

gw-inet.mia-cbp#show users
Line User Host(s) Idle Location
6 vty 0 himom idle 00:00:06 <ip address>

(note: I edited out my root account info and the ip addresses, but they shouldn't matter)

Can anyone tell me why user himom isn't getting level 15 upon login?

Thanks!

Don Johnston

When you authenticate using the local database, the priviledge level received is what the user account specifies.

guyking

ASKER

I'm sorry, but I don't understand your comment. You said "When you authenticate using the local database, the priviledge level received is what the user account specifies."

What does the "local database" have to do with the fact that the "line" privilege setting is ignored? When else is it ignored?
Better yet, when isn't it ignored?

I am sorry that I am so clueless, but I suspect that there is some much bigger picture issue that I am missing here.

Thanks.

ASKER CERTIFIED SOLUTION

Don Johnston

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

JerryDT

Hi Guyking,

Can you tell me if you ever found the solution to the index files (low disk space) problem you had last winter? I have the same thing going on . . .

Just email me at thomason@mchsi.com so that I don't cause trouble on * this * topic.

Thanks!

Jerry