cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
464
Views
5
Helpful
1
Replies

CSCvd65778 More clarity required

Mukund Sandur
Level 1
Level 1

Hi,

CSCvd65778 bug is listed under NX-OS 7.1(4)N1(1) which states that Unable to create new SVI when role on box is network-operator.

Symptom:
We cannot create SVI using TACACS user. 

Conditions:
Using TACACS user is not able to modify or create SVI. Using a local user then we are able to create an SVI.

Network-operator anyways has only read access to device. So how does this bug exactly affecting.

Require more clarity on what does this bug imply..

1 Reply 1

deyadav
Cisco Employee
Cisco Employee
Pre 7.1(4)N1(1) a remote user as a network-operator with authorization from TACACS+ was able to create/delete SVI or port-channel interfaces. Since 7.1(4)N1(1) user roles are honored and hence they are unable to create/delete SVI/port-channel interfaces even with TACACS+ authorizing it.
Documentation:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5500/sw/security/7x/b_5500_Security_Config_7x/b_5500_Security_Config_7x_chapter_0101.html
Secton: Configuring Command Authorization on TACACS+ Servers
From Cisco NX-OS Release 7.1(4)N1(1), a user with the network-operator role with authorization to create interfaces will not be able to create interfaces. Only a user with the network-admin role can create interfaces.