Radius Authorization Error

Posted on 2011-10-04
Last Modified: 2012-05-12

 we want to use a RSA/Radius Server to send commands to the router. Now we have an old one and on this router we get the error message RADIUS: no appropriate authorization type for user.
Knows somebody what this error message mean ?

Debug Radius

00:25:41: RADIUS: ustruct sharecount=1
00:25:41: RADIUS: Initial Transmit tty10 id 13, Access-Request, len 78
00:25:41:         Attribute 4 6 0A090FFA
00:25:41:         Attribute 5 6 0000000A
00:25:41:         Attribute 61 6 00000005
00:25:41:         Attribute 1 11 32313034
00:25:41:         Attribute 31 11 31302E39
00:25:41:         Attribute 2 18 BE011A6F
00:25:43: RADIUS: Received from id 13, Access-Accept, len 132
00:25:43:         Attribute 25 61 53425232
00:25:43:         Attribute 26 51 00000009012D7368
00:25:43: RADIUS: saved authorization data for user A803C at 26860C
00:25:43: RADIUS: cisco AVPair "shell:autocmd=access-enable host timeout 5"
00:25:43: RADIUS: no appropriate authorization type for user

The same configuration on different Cisco Routers 2800,2900 works fine.

Thanks for help.

Question by:bergertb
    LVL 76

    Accepted Solution

    Does this router have the same IOS version and related components as the ones that work?
    Double check the configuration on the working and this one dealing whether the user loging through radius would have the right to exec the access-enable.


    Author Comment

    The router has a old IOS, but with your tipp i found the solution.

    We send a command to the router and there the attribute Service-Type: Administrative was missing.
    After adding the attribute the command yould be executed on the router.
    LVL 35

    Expert Comment

    by:Ernie Beek
    This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.

    Featured Post

    Gigs: Get Your Project Delivered by an Expert

    Select from freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely and get projects done right.

    Join & Write a Comment

    How to configure Site to Site VPN on a Cisco ASA.     (version: 1.1 - updated August 6, 2009) Index          [Preface]   1.    [Introduction]   2.    [The situation]   3.    [Getting started]   4.    [Interesting traffic]   5.    [NAT0]   6.…
    Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now