topic ip http authentication aaa login-authentication doesnt work in Network Access Control

ip http authentication aaa login-authentication doesnt work

tcole1970 — Sun, 10 Mar 2019 22:59:23 GMT

I have "ip tacacs source-interface Vlan1 " in my config because without it enabled I cant ssh in with tacacs. However, with that line in the config, I cant access via https unless I have the line "ip http authentication local"

Re: ip http authentication aaa login-authentication doesnt work

Jagdeep Gambhir — Wed, 23 Jul 2008 12:01:55 GMT

For http access , the user should have privilege level 15. This is how you enable it on acs.

Bring users/groups in at level 15

1. Go to user or group setup in ACS

2. Drop down to "TACACS+ Settings"

3. Place a check in "Shell (Exec)"

4. Place a check in "Privilege level" and enter "15" in the adjacent field

Regards,

~JG

Do rate helpful posts

Re: ip http authentication aaa login-authentication doesnt work

tcole1970 — Wed, 23 Jul 2008 14:19:31 GMT

This is NOT the problem. All other switches except for the 10 we have to put the "ip tacacs source-interface Vlan1" work just fine when accessed via https using tacacs.

Re: ip http authentication aaa login-authentication doesnt work

Jagdeep Gambhir — Wed, 23 Jul 2008 20:30:47 GMT

Then this is something you should have included in your first port.

Thanks for using rating system.

Re: ip http authentication aaa login-authentication doesnt work

dhananjoy chowdhury — Wed, 23 Jul 2008 21:02:16 GMT

One small query, suppose you don't have the "ip http authentication local" statement in your config ... now when you try to login via HTTP, do you see any logs ( failed attempts or successfull) on the ACS server ?