topic Re: ACE with TACACS+ Issue in Network Access Control

ACE with TACACS+ Issue

xayavongp — Sun, 10 Mar 2019 23:46:03 GMT

Trying to get ACE module and IOS devices to work with TACACS+. I have ACS v3.2.

The "optional" syntax does not work. Any idea if the argument is valid for the ACS version ?

service=exec

optional shell:Admin=Admin domain

Tried it with quotations but that didn't work either.

Jatin Katyal — Thu, 29 Oct 2009 17:38:09 GMT

Hi,

Here is a reference doc for configuring ACE for Tacacs+ authentication,

0_A1/configuration/security/guide/aaa.html#wp1321891

Under custom attribute for Tacacs+ we need to specify attribute as,

shell:Admin*ADMIN MYDOMAIN1

= means mandatory attribute

* means optional

Information on context/role/domain (Virtualization on ACE):

0_A1/configuration/virtualization/guide/ovrview.html

Default "role" on ACE:

0_A1/configuration/virtualization/guide/ovrview.html#wp1051297

HTH

Plz rate helpful posts-

xayavongp — Thu, 29 Oct 2009 17:47:18 GMT

Cool thanks...that works now. The other yntax must not be compatible with my version.