topic Re: AAA on 6513 switch in Network Access Control

AAA on 6513 switch

pbvijay143 — Sun, 10 Mar 2019 21:58:28 GMT

In 6513 the AAA config not working

Re: AAA on 6513 switch

Richard Burts — Wed, 07 Feb 2007 15:29:08 GMT

Vijay

You have not given us much to work with here. The problem could be a configuration mistake on the 6513, it could be that the 6513 is not properly configured on the AAA server, it could be that the key used is not the same on both devices.

Posting the AAA configuration of the 6513 would be a good place to start. Also it would help if you would verify that there is IP connectivity between the 6513 and the AAA server. You could also look into the logs on the AAA server under failed attempts and tell us if there is any error message when you attempt AAA from the 6513.

If you can provide us some of the things I have asked for we may be able to find the solution to your problem.

HTH

Rick

Re: AAA on 6513 switch

pbvijay143 — Wed, 07 Feb 2007 15:56:41 GMT

Hi Rick

here the configuration

aaa new-model

aaa group server tacacs+ ACS

aaa authentication login default local

aaa authentication enable default none

aaa session-id unique

tacacs-server host x.x.x.x

no tacacs-server directed-request

tacacs-server key xxxxxxxx

The IOS verison is 12.2(18)SXD6,

Re: AAA on 6513 switch

Richard Burts — Wed, 07 Feb 2007 16:12:51 GMT

Vijay

I have looked at the config that you posted. I note that you are specifying local authentication for login to user mode and no authentication for enable mode. That is a slightly unusual combination, but if that is what you want you can do it.

Perhaps we need to clarify what the problem is. Your original post said that AAA was not working. I assumed that you were trying to communicate with an AAA server, but that is not what the config is doing. So perhaps you can clarify what about the AAA is not working.

HTH

Rick