topic Re: AAA authentication in Network Access Control

AAA authentication

robin.disla — Fri, 22 Feb 2019 20:47:16 GMT

I have configured AAA in my cat 9500 switches but while the service is active the switch does not allow me to use the local credentials of the equipment only those used by the active directory as I can do to enter with both local options as active directory with the active service.

Re: AAA authentication

gbekmezi-DD — Fri, 22 Feb 2019 20:55:09 GMT

Please share the relevant configuration. You have to make sure you have local authentication as an allowed method if you want local authentication to be allowed.

George

Re: AAA authentication

Jaderson Pessoa — Fri, 22 Feb 2019 20:57:19 GMT

please, share configuration about your AAA authentication.

Re: AAA authentication

robin.disla — Fri, 22 Feb 2019 21:01:17 GMT

I want to be able to authenticate with my AD and local user at the same time even if the service is active.

My current config is

aaa authentication login default group IAS local
aaa authentication login userAuthentication local group IAS
aaa authorization console
aaa authorization exec default group IAS local if-authenticated
aaa authorization exec userAuthorization local group IAS if-authenticated
aaa authorization network userAuthorization local group IAS
aaa accounting exec default start-stop group IAS
aaa accounting system default start-stop group IAS

Re: AAA authentication

gbekmezi-DD — Fri, 22 Feb 2019 21:14:09 GMT

aaa authentication login userAuthentication local group IAS
to
aaa authentication login userAuthentication local group IAS local

Re: AAA authentication

Jaderson Pessoa — Fri, 22 Feb 2019 21:16:08 GMT

dont forget to add local with the last authentication in your AAA authentication.

Re: AAA authentication

robin.disla — Mon, 25 Feb 2019 15:28:14 GMT

thanks the problem was solved.