topic AAA and Role based access (NPS) in Network Access Control

AAA and Role based access (NPS)

Esteban Talavera — Mon, 11 Mar 2019 03:37:13 GMT

I authenticate all my cisco switches and routers with AAA + NPS + AD

A server runs NPS service with cisco attribute shell:priv-lvl=15 or 5, depending of AD group.

But I'd like configure role based with IOS view.

When I issue the enable view command, I get

Password:

I tried with my AD password, enable configurated password, and always gets

% Authentication failed

Mi line vty config

line vty 0 4

authorization exec VTY-AAA

transport input ssh

AAA and Role based access (NPS)

Jatin Katyal — Fri, 05 Jul 2013 00:42:27 GMT

Have you gone through the below listed parser view configuration example. Please check here

View authentication is performed by an external authentication server via the new attribute "cli-view-name" so you need to use cisco-av-pair as cli-view-name=xxxx

AAA authentication associates only one view name to a particular user; that is, only one view name can be configured for a user in an authentication server.

In case you still have any issues, run debug parser view and share the output, I'll try to help.

~BR
Jatin Katyal

**Do rate helpful posts**

AAA and Role based access (NPS)

Esteban Talavera — Mon, 08 Jul 2013 16:25:46 GMT

Sorry, by mistake I click on "Correct Answer"

The problem is I can switch to view context

DC1841Ro1(config)#parser view MYVIEW

No view Active! Switch to View Context

When I try to switch

DC1841Ro1#enable view

Password:

% Authentication failed

None password allows me to enter. Remeber I'm using AAA + NPS + ADirectory

Thanks