Hi all,
I am having a small issue... When I try to provisioning my C3560CX model running software version
| Switch Ports Model | SW Version | SW Image |
| ------ ----- ----- | ---------- | ---------- |
| * | 1 12 | WS-C3560CX-8PC-S | 15.2(4)E4 | C3560CX-UNIVERSALK9-M |
I am getting this error:
Received response from pnp agent for message correlatorId: CiscoPnP-1.0-50-370-B44C140-47 but with error code : ZTD_CMD_ERROR Response String: PERMISSION_DENIED:authorization failed
I can see when I google that some are referring to other software version, but also that I could be something with aaa methode.
Here I am using :
aaa authentication login default group TACACS-ISE local
aaa authorization config-commands
aaa authorization exec default group TACACS-ISE local
aaa authorization commands 1 default group TACACS-ISE if-authenticated
aaa authorization commands 15 default group TACACS-ISE if-authenticated
and the group is containing my TACACS servers.
Anybody that has some info on how to fix this??
I have also tried to run the aaa with a EM script like this:
! EEM SCRIPT
!
event manager applet POST_PNP
event timer countdown time 90
action 1.0 cli command "enable"
action 1.1 cli command "config t"
action 2.0 cli command "aaa authorization config-commands"
action 2.1 cli command "aaa authorization commands 1 default group TACACS-ISE if-authenticated"
action 2.2 cli command "aaa authorization commands 15 default group TACACS-ISE if-authenticated"
action 2.3 cli command "no event manager applet POST_PNP"
action 2.4 cli command "end"
action 2.5 cli command "wr mem"
action 3.0 cli command "end"
but that don´t change anything here.
Hope somebody might can give me some direction on this matter.
Frank
small thing to fix the issue.... 