cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
693
Views
0
Helpful
1
Replies

IPS roles using ACS 5.2

adriansales
Level 1
Level 1

Hi Guys,

I am currently configuring Ips roles on my ACS 5.2. The authentication works fine but it seems that my "viewer role" is not working. I have already configured the cisco-av-pair attribute with "ips-role=viewer" and bound it to my rule using authorization profiles. Any ideas?

Regards,

Adrian

1 Reply 1

mkodali
Cisco Employee
Cisco Employee

Hi Adrian

What error message do you get when trying to login as viewer? Make sure the default role on the sensor is left blank under service aaa and you have defined only one role on the ACS5.2 for this particular user.

Madhu

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card