Setting up read only tacacs for nexus

joe.fodor — Fri, 15 Feb 2019 17:24:21 GMT

Hello,

I am trying to set up read only access to our nexus equipment using tacacs in ISE.

In the tacacs profile here is what i have set up in the raw view with common task type being Nexus

shell:roles="network-operator vdc-operator"

my command sets are:

denying config t*

deny reload

permit show run

I dont think there is anything wrong with my admin policy set.

When I log in and try to run any command I get this error:

Error: AAA authorization failed AAA_AUTHOR_STATUS_METHOD=16(0x10)

any help would be appreciated.

Re: Setting up read only tacacs for nexus

hslai — Fri, 15 Feb 2019 17:31:15 GMT