topic AAA Configuration on ISE in Network Access Control

AAA Configuration on ISE

CSCO11704570 — Wed, 23 Aug 2017 10:38:49 GMT

Dears in Community

I have configured AAA in ISE 2.2. but I am receiving error of 13036 error message (selected shell profile is deny access) when it is authenticated in live logs.

Regards

Re: AAA Configuration on ISE

paul — Wed, 23 Aug 2017 12:19:07 GMT

You would need to post a screen shot of your policy set and the details of the authentication hitting the Deny Access. It sounds like your rules aren't configured correctly and you aren't hitting the rule you expect.

Re: AAA Configuration on ISE

Mohammed al Baqari — Thu, 24 Aug 2017 03:48:18 GMT

Hi,

Along with the policy, I think you need to share your debug radius authen from NAD to match the sent attributes against the policy set.

Re: AAA Configuration on ISE

ognyan.totev — Thu, 24 Aug 2017 06:16:03 GMT

Hello , go to Device administration -> policy elements >results >Tacacs command sets > create new command set like

permit all commands

Command Set

tacacs.commands

Name

Description

Commands

Permit any command that is not listed below

Tick the box and apply in sets and let us see what u configure in tripple AAA model in switch

Re: AAA Configuration on ISE

hslai — Mon, 28 Aug 2017 22:00:28 GMT

Adding to the other comments, please check out the guides @ Device Administration (TACACS+)