08-19-2015 05:11 AM - edited 03-10-2019 10:59 PM
Hello All,
I have configured aaa commands as below:
tacacs-server host xxxxxx
tacacs-server directed-request
tacacs-server key xxxxxx
aaa new-model
aaa new-model
aaa authentication login default local
aaa authentication login techop group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa authorization exec default group tacacs+ local
aaa authorization commands 1 default group tacacs+ local
aaa authorization commands 15 default group tacacs+ local
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default stop-only group tacacs+
aaa accounting commands 15 default stop-only group tacacs+
aaa session-id common
line vty 0 15
login authentication techop
Tacacs is working fine for ssh but when I am trying to console to switch
I am able to login in exec mode but when switch asking for enable password
the switch is not taking any password ( be it Tacacs or local credentials).
Also I am able to login to exec mode through console by local credentials
and not by credentials of Tacacs server.
Temp>en
password:
% Error in authentication.
Solved! Go to Solution.
08-20-2015 09:00 AM
Hey,
Please share :
debug aaa authentication
debug aaa authorizarion
debug tacacs+
Regards
Ed
08-20-2015 09:00 AM
Hey,
Please share :
debug aaa authentication
debug aaa authorizarion
debug tacacs+
Regards
Ed
08-25-2015 10:00 PM
Hi Edward,
Thanks for taking interest in my query. I have myself found a working solution for this. I have removed command aaa authentication enable default group tacacs+ enable and I was able to enter privilege mode from local enable password.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide