Hi,
I have an issue with configuring TACACs authorization through Cisco ISE for some HPE B-Series switches, model is SN65000B (equivalent to Brocade 6520), Brocade FOS is v8.0.2c. We have followed the instructions in the Brocade Admin guide and can logon to the switch via TACACs account. We get admin rights as expected, but admin privilege for the Chassis Role isn't coming through.
TACACs configuration on Cisco ISE is:
brcd-role = admin
brcd-AV-Pair1 = "homeLF=128;LFRoleList=admin:1-128"
brcd-AV-Pair2 = "chassisRole=admin"
Switch output for TACACs user is:
Account name: testuser
Description: Remote Account
Enabled: Yes
Password Last Change Date: Unknown (UTC)
Password Expiration Date: Not Applicable (UTC)
Locked: No
Home LF Role: admin
Role-LF List: admin: 1-128
No chassis permission
Home LF: 128 Day Time Access: N/A
We have tried changing the capitalisation of the role names and priviledges, but that doesn't have any effect. We have also tried joining the 'brcd-AV-Pair1' and 'brcd-AV-Pair2' parameters into just one 'brcd-AV-Pair1' entry, but that doesn;t have any effect either.
Anybody have any ideas what is wrong and how we can fix?
