cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1668
Views
0
Helpful
6
Replies

AAA authentication

robin.disla
Level 1
Level 1

I have configured AAA in my cat 9500 switches but while the service is active the switch does not allow me to use the local credentials of the equipment only those used by the active directory as I can do to enter with both local options as active directory with the active service.

 

 

2 Accepted Solutions

Accepted Solutions

aaa authentication login userAuthentication local group IAS
to
aaa authentication login userAuthentication local group IAS local

View solution in original post

dont forget to add local with the last authentication in your AAA authentication.
Jaderson Pessoa
*** Rate All Helpful Responses ***

View solution in original post

6 Replies 6

gbekmezi-DD
Level 5
Level 5
Please share the relevant configuration. You have to make sure you have local authentication as an allowed method if you want local authentication to be allowed.


George

Jaderson Pessoa
VIP Alumni
VIP Alumni
please, share configuration about your AAA authentication.
Jaderson Pessoa
*** Rate All Helpful Responses ***

robin.disla
Level 1
Level 1

I want to be able to authenticate with my AD and local user at the same time even if the service is active.

 

My current config is

 

aaa authentication login default group IAS local
aaa authentication login userAuthentication local group IAS
aaa authorization console
aaa authorization exec default group IAS local if-authenticated
aaa authorization exec userAuthorization local group IAS if-authenticated
aaa authorization network userAuthorization local group IAS
aaa accounting exec default start-stop group IAS
aaa accounting system default start-stop group IAS

 

 

 

 

 

aaa authentication login userAuthentication local group IAS
to
aaa authentication login userAuthentication local group IAS local

dont forget to add local with the last authentication in your AAA authentication.
Jaderson Pessoa
*** Rate All Helpful Responses ***

thanks the problem was solved.