cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

3426
Views
2
Helpful
4
Replies
Highlighted
Beginner

AAA Configuration on ISE

Dears in Community

I have configured AAA in ISE 2.2. but I am receiving error of 13036 error message (selected shell profile is deny access) when it is authenticated in live logs.

Regards

4 REPLIES 4
Highlighted
Advocate

You would need to post a screen shot of your policy set and the details of the authentication hitting the Deny Access.  It sounds like your rules aren't configured correctly and you aren't hitting the rule you expect.

Highlighted
VIP Advisor

Hi,

Along with the policy, I think you need to share your debug radius authen from NAD to match the sent attributes against the policy set.

Highlighted
Contributor

Hello , go to Device administration -> policy elements >results >Tacacs command sets > create new command set like

permit all commands

Command Set
  
  

  
  

  

  

Commands

  
  
Tick the box and apply in sets and let us see what u configure in tripple AAA model in switch

Highlighted
Cisco Employee

Adding to the other comments, please check out the guides @ Device Administration (TACACS+)

Content for Community-Ad