Hello.
My TACACS server is a ACS 3.3.2. I have associated two Active Directory groups to two of the ACS groups.
1. I need to give full telnet/ssh and console rights to Group1 to our IOS and CATOS devices.
2. I need to allow Group2 to sh only the SHOW command output
3. I also need to gather accounting info on the two groups.
I have configured the following on the IOS devices. But my authorization is failing:
aaa new-model
!
aaa authentication login default group tacacs+ local none
aaa authorization commands 1 default group tacacs+ if-authenticated
aaa authorization commands 15 default group tacacs+ if-authenticated
aaa accounting commands 1 default stop-only group tacacs+
aaa accounting commands 15 default stop-only group tacacs+
aaa accounting update newinfo
aaa session-id common
ip tacacs source-interface Loopback0
tacacs-server host 10.23.x.y
tacacs-server directed-request
tacacs-server key 123
What would be CATOS commands to accomplish my task?
Thanks veryone in advance.
Bo
