topic Hi there, what do you have in Network Access Control

ACS Fallback

eyadgharaibah — Mon, 11 Mar 2019 06:42:23 GMT

Hi
i'm Trying to config ACS Fallback on cisco Switch for telnet , but no luck to work
please find the Switch Configuration

username cisco privilege 15 password 0 cisco

aaa new-model

aaa authentication login Admin group tacacs+ local

aaa authorization config-commands

aaa authorization exec Admin group tacacs+ local

aaa authorization commands 1 Admin group tacacs+

aaa authorization commands 15 Admin group tacacs+ local

tacacs-server host 150.1.7.30 key ccie

tacacs-server directed-request

privilege configure level 15 interface
privilege configure level 15 no shutdown
privilege configure level 15 shutdown
privilege exec level 15 show version
privilege exec level 15 show privilege
privilege exec level 15 show ip interface brief
privilege exec level 15 configure terminal
privilege exec level 15 show running-config

aaa new-model

aaa authentication login Admin group tacacs+ local

aaa authorization config-commands

aaa authorization exec Admin group tacacs+ local

aaa authorization commands 1 Admin group tacacs+

aaa authorization commands 15 Admin group tacacs+ local

tacacs-server host 150.1.7.30 key ccie

tacacs-server directed-request

Hi there, what do you have

nspasov — Tue, 26 Apr 2016 15:23:46 GMT

Hi there, what do you have configured in your vty lines? You can get the output with

show run | sec line

Thank you for rating helpful posts!

@Neno Spasov

eyadgharaibah — Tue, 26 Apr 2016 17:03:32 GMT

@Neno Spasov

line vty 0 4

authorization commands 1 Admin

authorization commands 15 Admin

authorization exec Admin

line vty 5 15

authorization commands 1 Admin

authorization commands 15 Admin

authorization exec Admin

end

Sorry for the delay here. I

nspasov — Sat, 30 Apr 2016 14:03:00 GMT

Sorry for the delay here. I have a couple of more questions:

1. What exactly happens when you test this? Does the process fail during authentication or authorization?

2. How do you test the unavailability of the AAA serve

Thank you for rating helpful posts!