topic Re: % Authorization failed. in Network Access Control https://community.cisco.com/t5/network-access-control/authorization-failed/m-p/815036#M419731 <HTML><HEAD></HEAD><BODY><P>change template to :</P><P></P><P>username admin password admin </P><P>aaa new-model </P><P>aaa authentication login default group tacacs+ local </P><P>aaa authentication enable default group tacacs+ enable </P><P>aaa authorization exec default group tacacs+ if-authenticated</P><P>aaa authorization commands 0 default group tacacs+ if-authenticated </P><P>aaa authorization commands 1 default group tacacs+ if-authenticated</P><P>aaa authorization commands 15 default group tacacs+ if-authenticated</P><P>aaa accounting system default start-stop group tacacs+ </P><P>aaa accounting exec default start-stop group tacacs+ </P><P>aaa accounting commands 0 default start-stop group tacacs+ </P><P>aaa accounting commands 1 default start-stop group tacacs+ </P><P>aaa accounting commands 15 default start-stop group tacacs+ </P><P>tacacs-server host 172.16.101.247 key X </P><P>aaa authorization config-commands</P><P></P><P>Then try to add, this is happening cause you are enabling authorization but are logged in with unprivileged account.</P><P></P><P>~Rohit</P></BODY></HTML> Tue, 21 Aug 2007 08:35:00 GMT rochopra 2007-08-21T08:35:00Z % Authorization failed. https://community.cisco.com/t5/network-access-control/authorization-failed/m-p/815035#M419730 <P>Can you help me to Understand that when I am adding aaa template to a switch which I am connected with telnet give me the error % Authorization failed </P><P>and accounting part is not unable to be added. Also is unable to connect to this switch again. Even username admin is added , The template was:</P><P></P><P>username admin password admin</P><P>aaa new-model </P><P>aaa authentication login default group tacacs+ local </P><P>aaa authentication enable default group tacacs+ enable </P><P>aaa authorization commands 0 default group tacacs+ local </P><P>aaa authorization commands 1 default group tacacs+ local </P><P>aaa authorization commands 15 default group tacacs+ local </P><P>aaa authorization exec default group tacacs+ local </P><P>aaa authorization config-commands </P><P>aaa accounting system default start-stop group tacacs+ </P><P>aaa accounting exec default start-stop group tacacs+ </P><P>aaa accounting commands 0 default start-stop group tacacs+</P><P>aaa accounting commands 1 default start-stop group tacacs+ </P><P>aaa accounting commands 15 default start-stop group tacacs+ </P><P>tacacs-server host 172.16.101.247 key X</P><P></P> Sun, 10 Mar 2019 22:20:44 GMT https://community.cisco.com/t5/network-access-control/authorization-failed/m-p/815035#M419730 adriatikb 2019-03-10T22:20:44Z Re: % Authorization failed. https://community.cisco.com/t5/network-access-control/authorization-failed/m-p/815036#M419731 <HTML><HEAD></HEAD><BODY><P>change template to :</P><P></P><P>username admin password admin </P><P>aaa new-model </P><P>aaa authentication login default group tacacs+ local </P><P>aaa authentication enable default group tacacs+ enable </P><P>aaa authorization exec default group tacacs+ if-authenticated</P><P>aaa authorization commands 0 default group tacacs+ if-authenticated </P><P>aaa authorization commands 1 default group tacacs+ if-authenticated</P><P>aaa authorization commands 15 default group tacacs+ if-authenticated</P><P>aaa accounting system default start-stop group tacacs+ </P><P>aaa accounting exec default start-stop group tacacs+ </P><P>aaa accounting commands 0 default start-stop group tacacs+ </P><P>aaa accounting commands 1 default start-stop group tacacs+ </P><P>aaa accounting commands 15 default start-stop group tacacs+ </P><P>tacacs-server host 172.16.101.247 key X </P><P>aaa authorization config-commands</P><P></P><P>Then try to add, this is happening cause you are enabling authorization but are logged in with unprivileged account.</P><P></P><P>~Rohit</P></BODY></HTML> Tue, 21 Aug 2007 08:35:00 GMT https://community.cisco.com/t5/network-access-control/authorization-failed/m-p/815036#M419731 rochopra 2007-08-21T08:35:00Z