topic Given the problem description in Network Access Control

ACS 4.2 custom attribute problem

Cisco Freak — Mon, 11 Mar 2019 06:19:00 GMT

Hi,

I am configuring a user account in ACS 4.2. I assigned privilege level 15 and exec access to user and it works.User can get into config mode.

Now I am adding a few custom attribute to that user to enable configuration access to a ace context.

After that the user loses the privilege level 15 and he gets privilege level 1 and the customer attributes takes effect.

Is there anyway I can keep both custom attributes and privilege level 15.

Given the problem description

Javier Henderson — Thu, 10 Dec 2015 19:30:45 GMT

Given the problem description, I suspect the custom attribute/value pairs are configured as mandatory. Since the IOS devices don't know what to do with them, and they are mandatory, authorization will fail, per design.

Try making the custom a/v pairs optional (i.e., use * instead of = when defining them).

This is how I defined the

Cisco Freak — Thu, 10 Dec 2015 20:03:50 GMT

This is how I defined the custom attribute:

shell:Context1*Admin default-domain

There is no = in the definition.

How do I assign privilege

Cisco Freak — Thu, 10 Dec 2015 20:22:10 GMT

How do I assign privilege level 15 and exec access through custom attribute?

Anyone got idea about this

Cisco Freak — Mon, 14 Dec 2015 17:10:29 GMT

Anyone got idea about this problem?

How do I assign privilege level 15 and exec access through custom attribute?