topic Device admin not able to execute command a Cisco ASA CLI after T in Network Access Control

Device admin not able to execute command a Cisco ASA CLI after TACACS authentication

Steven Chua — Mon, 11 Mar 2019 02:12:20 GMT

Hi All,

I have setup a Cisco ASA with the device admin access to be authencticatedand authorizated with a Cisco ACS v 5.2. However, I am not able to exeute and command at the CLI even I have authenicated successfully. I have configure the Cisco ACS to permit all command and to set the shell prviliages to 15.

Please advice.

Thks and Rgds

Device admin not able to execute command a Cisco ASA CLI after T

Jatin Katyal — Sun, 17 Jun 2012 19:07:20 GMT

Looks like you are getting "command authorization failed".

Did you check this option under policy element > device administration > command set > edit >

"Permit any command that is not in the table below"

Do we have the same/correct command set selected under the access-policies > default device admin > authorization > edit rule > check what we have in command set selected option.

If it's not visible there, then on the same page you need to click on customise tab in the right bottom corner and move the command set option on the right set.

Hope this adds some direction.

Regards,

Jatin

Do rate helpful posts-

Device admin not able to execute command a Cisco ASA CLI after T

maldehne — Mon, 18 Jun 2012 13:49:13 GMT

What is the authorization failure reason if there is any in the logs?