topic Re: After lost connect to ACS server locac user doesn't work in Network Access Control https://community.cisco.com/t5/network-access-control/after-lost-connect-to-acs-server-locac-user-doesn-t-work/m-p/1334486#M323476 <HTML><HEAD></HEAD><BODY><P>This is help me!</P><P>thx</P><P></P><P></P></BODY></HTML> Fri, 30 Oct 2009 10:27:01 GMT antonio81 2009-10-30T10:27:01Z After lost connect to ACS server locac user doesn't work https://community.cisco.com/t5/network-access-control/after-lost-connect-to-acs-server-locac-user-doesn-t-work/m-p/1334484#M323452 <P>Hello!</P><P>Could you help me resolve some problem.</P><P></P><P>Cisco 7206VXR (NPE400) processor (revision A), Version 12.2(31)SB11</P><P>Configuration from the router:</P><P>aaa new-model</P><P>aaa authentication login default group tacacs+ local</P><P>aaa authentication login local-admin-access group tacacs+ local</P><P>aaa authentication login remote-admin-access group tacacs+ local</P><P>aaa authentication enable default group tacacs+ local</P><P>aaa authorization exec default group tacacs+ if-authenticated </P><P>aaa authorization exec local-admin-access group tacacs+ if-authenticated </P><P>aaa authorization exec remote-admin-access group tacacs+ if-authenticated </P><P>aaa accounting exec default stop-only group tacacs+</P><P>aaa accounting exec local-admin-access stop-only group tacacs+</P><P>aaa accounting exec remote-admin-access stop-only group tacacs+</P><P>aaa accounting commands 0 default stop-only group tacacs+</P><P>aaa accounting commands 0 local-admin-access stop-only group tacacs+</P><P>aaa accounting commands 0 remote-admin-access stop-only group tacacs+</P><P>aaa accounting commands 1 default stop-only group tacacs+</P><P>aaa accounting commands 1 local-admin-access stop-only group tacacs+</P><P>aaa accounting commands 1 remote-admin-access stop-only group tacacs+</P><P>aaa accounting commands 15 default stop-only group tacacs+</P><P>aaa accounting commands 15 local-admin-access stop-only group tacacs+</P><P>aaa accounting commands 15 remote-admin-access stop-only group tacacs+</P><P>aaa accounting system default start-stop group tacacs+</P><P></P><P>When ACS server works, I haven't problem</P><P>After I block ACS and try Connect to router..</P><P>lab(config-if)#ip access-group 101 in</P><P></P><P>And I try use local authentication, but she doesn't work (privilege 15 doesn't work)</P><P> username test10 privilege 15 secret 5 $1$XJ5K$ANa/.PzJO4fcLpe31jfXk/</P><P></P><P>User Access Verification</P><P></P><P>Username: test10</P><P>Password: </P><P></P><P>lab&gt;</P><P></P><P>Why "privilege 15" doesn't work ?</P> Sun, 10 Mar 2019 23:46:05 GMT https://community.cisco.com/t5/network-access-control/after-lost-connect-to-acs-server-locac-user-doesn-t-work/m-p/1334484#M323452 antonio81 2019-03-10T23:46:05Z Re: After lost connect to ACS server locac user doesn't work https://community.cisco.com/t5/network-access-control/after-lost-connect-to-acs-server-locac-user-doesn-t-work/m-p/1334485#M323461 <HTML><HEAD></HEAD><BODY><P>Hi Antonio,</P><P></P><P>Please change this command</P><P></P><P>aaa authorization exec default group tacacs+ if-authenticated</P><P></P><P>to </P><P></P><P>aaa authorization exec default group tacacs+ local</P><P></P><P>If issue is still there then get the debugs,</P><P></P><P>debug aaa authentication</P><P>debug aaa authortization</P><P>debug tacacs</P><P></P><P></P><P>All the best!</P><P></P><P>Regards,</P><P>~JG</P><P></P><P>Do rate helpful posts</P></BODY></HTML> Fri, 30 Oct 2009 09:13:04 GMT https://community.cisco.com/t5/network-access-control/after-lost-connect-to-acs-server-locac-user-doesn-t-work/m-p/1334485#M323461 Jagdeep Gambhir 2009-10-30T09:13:04Z Re: After lost connect to ACS server locac user doesn't work https://community.cisco.com/t5/network-access-control/after-lost-connect-to-acs-server-locac-user-doesn-t-work/m-p/1334486#M323476 <HTML><HEAD></HEAD><BODY><P>This is help me!</P><P>thx</P><P></P><P></P></BODY></HTML> Fri, 30 Oct 2009 10:27:01 GMT https://community.cisco.com/t5/network-access-control/after-lost-connect-to-acs-server-locac-user-doesn-t-work/m-p/1334486#M323476 antonio81 2009-10-30T10:27:01Z Re: After lost connect to ACS server locac user doesn't work https://community.cisco.com/t5/network-access-control/after-lost-connect-to-acs-server-locac-user-doesn-t-work/m-p/1334487#M323493 <HTML><HEAD></HEAD><BODY><P>If that fixed it then please mark it resolved so other can benefit.</P><P></P><P></P><P>Regards,</P><P>~JG</P></BODY></HTML> Fri, 30 Oct 2009 13:21:30 GMT https://community.cisco.com/t5/network-access-control/after-lost-connect-to-acs-server-locac-user-doesn-t-work/m-p/1334487#M323493 Jagdeep Gambhir 2009-10-30T13:21:30Z Re: After lost connect to ACS server locac user doesn't work https://community.cisco.com/t5/network-access-control/after-lost-connect-to-acs-server-locac-user-doesn-t-work/m-p/1334488#M323532 <HTML><HEAD></HEAD><BODY><P>well said.</P><P></P><P>JK</P></BODY></HTML> Fri, 30 Oct 2009 13:54:57 GMT https://community.cisco.com/t5/network-access-control/after-lost-connect-to-acs-server-locac-user-doesn-t-work/m-p/1334488#M323532 Jatin Katyal 2009-10-30T13:54:57Z