cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4701
Views
2
Helpful
4
Replies

AAA Configuration on ISE

CSCO11704570
Level 1
Level 1

Dears in Community

I have configured AAA in ISE 2.2. but I am receiving error of 13036 error message (selected shell profile is deny access) when it is authenticated in live logs.

Regards

4 Replies 4

paul
Level 10
Level 10

You would need to post a screen shot of your policy set and the details of the authentication hitting the Deny Access.  It sounds like your rules aren't configured correctly and you aren't hitting the rule you expect.

Hi,

Along with the policy, I think you need to share your debug radius authen from NAD to match the sent attributes against the policy set.

ognyan.totev
Level 5
Level 5

Hello , go to Device administration -> policy elements >results >Tacacs command sets > create new command set like

permit all commands

Command Set
  
  

  
  

  

  

Commands

  
  
Tick the box and apply in sets and let us see what u configure in tripple AAA model in switch

hslai
Cisco Employee
Cisco Employee

Adding to the other comments, please check out the guides @ Device Administration (TACACS+)

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: