topic Re: Authorization error and prompt HOST: in Network Security

Authorization error and prompt HOST:

bobtian — Tue, 15 Aug 2023 09:17:12 GMT

Hello everyone,

I have one switch with AAA configured with outsid NPS server for user login authorization. After enabling AAA function on switch and I tried to login , what i see is Host: prompt with banner .

tried debugging, but log indicated authentication and authorization was successful, there is no error infos.

below is my configuration for AAA:

aaa authentication login SRMLNPS group SRMLNPS local
aaa authorization exec SRMLNPS group SRMLNPS local
aaa authorization network default group cnhkgacp
aaa accounting update periodic 15

line vty 0 4

authorization exec SRMLNPS
logging synchronous
login authentication SRMLNPS

below is snopshot for error login :

Re: Authorization error and prompt HOST:

balaji.bandi — Tue, 15 Aug 2023 10:27:02 GMT

what device model and IOS code running on it ?

Are you able to access from console or you locked now ?

check below thread may help you :

https://community.cisco.com/t5/network-management/cisco-switch-authentication-with-microsoft-nps-case-sensitive/td-p/4606889

Re: Authorization error and prompt HOST:

bobtian — Tue, 15 Aug 2023 10:37:26 GMT

The switch model is C9200-48p，software version is 17.08,

Re: Authorization error and prompt HOST:

bobtian — Tue, 15 Aug 2023 10:41:38 GMT

I can access device with console and also tried troubleshooting with debug aaa authorization cammnd, the log display the user successfully being authorized But with the wrong privilege 15（which i set privilege 1 with this username on NPS server）

Re: Authorization error and prompt HOST:

bobtian — Tue, 15 Aug 2023 10:43:23 GMT

And as long as i undo command 'authoriza exec radius-server' under line vty mode, the error just dispeared.