topic AS5850's not allowing me to use aaa in Network Access Control

AS5850's not allowing me to use aaa

m.montenegro — Sun, 10 Mar 2019 14:47:38 GMT

hi everyone,

i have a problem getting the accesss severs (AS5850's and AS5550's to work using aaa authentication. anytime i add in the aaa configuration i am able to ping but not telnet using my user/password.

the folllowing is a template of commands i use for all devices.

aaa new-model

aaa authentication banner ^CC Unauthorized use is Prohibited ^C

aaa authentication fail-message ^CC Failed Login ^C

aaa authentication login default group tacacs+ local none

aaa authentication enable default group tacacs+ line enable none

aaa authorization exec default group tacacs+ if-authenticated

Re: AS5850's not allowing me to use aaa

Richard Burts — Wed, 12 May 2004 14:56:22 GMT

You have not provided enough information to allow us to diagnose the issue.

- In the config how is the tacacs host configured and how is the tacacs password configured?

- After you attempt to telnet do you get the "failed login" error message?

- What are the results of doing show tacacs on the router?

- Are you sure that your user name and password are correctly defined in tacacs and are you sure that your id in tacacs is set up to have access to these devices?

- Have you run debug tacacs authentication? and if so what results did debug produce?

When we know these things we will be in much better position to answer your problem.

Re: AS5850's not allowing me to use aaa

m.montenegro — Wed, 12 May 2004 19:36:17 GMT

ok,

these are the lines i use for all my devices and they work perfectly, but when i try the same config on the 2611SLT's and the 3745gatekeepers it doesn't even give me a user name and password prompt but i am able to ping it from my tacacs server.

aaa new-model

aaa authentication banner ^CC Unauthorized use is Prohibited ^C

aaa authentication fail-message ^CC Failed Login ^C

aaa authentication login default group tacacs+ local none

aaa authentication enable default group tacacs+ line enable none

aaa authorization exec default group tacacs+ if-authenticated

Tacacs-server host *.*.*.*

Tacacs-server key *********

Re: AS5850's not allowing me to use aaa

Richard Burts — Wed, 12 May 2004 20:10:07 GMT

the fact that there is no prompt for username or password may be a clue.

Could you post the configuration of the vty ports.

In particular I am interested in is exec or no exec configured; is there an access-class configured; is a password configured; is there a particular transport configured.