> do you have a line for exec authorization, something like this: > > aaa authorization exec default group tacacs+ > > I believe you need this otherwise your priv level will not take effect. Yes we have: aaa authorization exec default group tacacs+ if-authenticated Sorry for late answer. Your mail was delivered today. Gabor