topic Adding Nexus 5596 to ACS v4.2 in Network Access Control

Adding Nexus 5596 to ACS v4.2

richmondk — Mon, 11 Mar 2019 03:01:46 GMT

Hi. Does ACS v4.2 support the addition of the Nexus switches? We have a few new Nexus devices that have been added to ACS, but cannot be accessed successfully. A msg re: role based authentication is received. Do I have to do something special in ACS to support this?

Nexus 5596 v5.1(3)N2(1)

Thanks!

Adding Nexus 5596 to ACS v4.2

Amjad Abdullah — Wed, 30 Jan 2013 07:29:00 GMT

What type of configuration you use (you use device restriction or something under the user or the group?)

When do you exactly see the error message? after or before providing the credentials?

What you see in the failed attempts on the ACS logs?

Rating useful replies is more useful than saying "Thank you"

Adding Nexus 5596 to ACS v4.2

Oleksandr Nesterov — Wed, 30 Jan 2013 11:35:39 GMT

Hi Keely

Please check the following lins about nexus configuration:

http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/troubleshooting/guide/n5K_ts_sec.html

http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/configuration/guide/cli/sec_aaa.html

ACS should use cisco-av-pair attribute for nexus devices.

HTH,

Alex

Adding Nexus 5596 to ACS v4.2

richmondk — Wed, 30 Jan 2013 21:16:30 GMT

Hi. Thanks for the response.

We're using the Group as the authority for authentication.

The error message is seen after the credentials are entered. It says the authentication servers are unreachable.

There are two errors in the ACS logs - the username was wrong and the password was wrong.

I'm working with TAC on it now, but the solution they provided doesn't work so far.

Adding Nexus 5596 to ACS v4.2

richmondk — Wed, 30 Jan 2013 21:20:51 GMT

Hi Alex. Thanks for the information. I've passed it along to my co-worker who's responsible for the Nexus config. Hopefully, it will get us on the right path.

~Keely