Radius Authorization Error

Hi,

 we want to use a RSA/Radius Server to send commands to the router. Now we have an old one and on this router we get the error message RADIUS: no appropriate authorization type for user.
Knows somebody what this error message mean ?

Debug Radius

00:25:41: RADIUS: ustruct sharecount=1
00:25:41: RADIUS: Initial Transmit tty10 id 13 10.9.15.164:1645, Access-Request, len 78
00:25:41:         Attribute 4 6 0A090FFA
00:25:41:         Attribute 5 6 0000000A
00:25:41:         Attribute 61 6 00000005
00:25:41:         Attribute 1 11 32313034
00:25:41:         Attribute 31 11 31302E39
00:25:41:         Attribute 2 18 BE011A6F
00:25:43: RADIUS: Received from id 13 10.9.15.164:1645, Access-Accept, len 132
00:25:43:         Attribute 25 61 53425232
00:25:43:         Attribute 26 51 00000009012D7368
00:25:43: RADIUS: saved authorization data for user A803C at 26860C
00:25:43: RADIUS: cisco AVPair "shell:autocmd=access-enable host timeout 5"
00:25:43: RADIUS: no appropriate authorization type for user

The same configuration on different Cisco Routers 2800,2900 works fine.

Thanks for help.

Tom
bergertbAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

arnoldCommented:
Does this router have the same IOS version and related components as the ones that work?
Double check the configuration on the working and this one dealing whether the user loging through radius would have the right to exec the access-enable.

http://www.cisco.com/en/US/tech/tk583/tk822/technologies_tech_note09186a0080094524.shtml

0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
bergertbAuthor Commented:
The router has a old IOS, but with your tipp i found the solution.

We send a command to the router and there the attribute Service-Type: Administrative was missing.
After adding the attribute the command yould be executed on the router.
0
Ernie BeekExpertCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Cisco

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.