topic Re: ACS 4 configuration issue in Network Access Control

ACS 4 configuration issue

kjanakiraman — Sun, 10 Mar 2019 22:07:01 GMT

I had set up Cisco ACS for TACACS authentication for Cisco Aironet and Cisco ASA. Unfortunately the server crashed and i did not have backup. But i had the secret key and other server information. I re-installed the Cisco ACS and could successfully autenticate to Cisco Aironet, but cisco ASA is giving me access denined when trying through SSH by giving username and password. Under ACS

Created username and password and remaining i left for group setting. under group setting i enabled shell (exec) and privilige level 15. I made the maximum privilge level for AAA clients to 15 and tried enabling and disabling the command level authroization and checked allow unmatched argument, but still getting the same error. The cisco site is also referring to the same. Is there any option i am missing out? Request assistace since i am not able to connect to the ASA.

Thanks in Advance

Re: ACS 4 configuration issue

royalblues — Wed, 25 Apr 2007 15:37:58 GMT

Didn't you have a secondary authentication mechanism enabled on the ASA if the TACACS+ fails

Narayan

Re: ACS 4 configuration issue

kjanakiraman — Thu, 26 Apr 2007 00:42:44 GMT

No i do not have. I was setting up the environment when the server crashed and hence no backup. I am sure that once i get the TACACS configured, things should be fine since using the same TACACS i was able to connect back to cisco Aironet

Re: ACS 4 configuration issue

Vivek Santuka — Thu, 26 Apr 2007 14:43:40 GMT

Hi,

Please check the failed attempts log in ACS and let us know what is the authen-error-code.

Regards,

Vivek

Re: ACS 4 configuration issue

kjanakiraman — Fri, 27 Apr 2007 01:11:40 GMT

In the failed attempts i am getting "un-known" When iam trying to initiate a telent connection, in the console of the Pix i could see "aaa server host machine not responding". I believe there is some setting in the ACS which i am missing out.

Re: ACS 4 configuration issue

Vivek Santuka — Fri, 27 Apr 2007 11:21:00 GMT

Hi,

I believe you are getting UnKnown Nas error. Please add the device in the network configuration as a AAA client. Make sure you are using the right protocol (Tacacs/Radius) and right key as per device config.

Regards,

Vivek

Re: ACS 4 configuration issue

kjanakiraman — Fri, 27 Apr 2007 13:14:14 GMT

I have the configuration in the network configuration option. What else could be the reason?