07-19-2016 07:23 AM - edited 03-10-2019 11:56 PM
Hi everyone,
Im have used TACACS+ with ACS 5.7.0.13 and often when i try to login on my device the error message is (denied access) even though the credencials are ok, when i try again work properly any sugestion? My ACS have integration with windows AD accounts...I think interesting when i try to get log on ACS side (monitorig, reports and so on...) I cant find any wrong authentication attempt
Router configuration side:
aaa new-model
!
aaa user profile profile
!
aaa group server tacacs+ KEY
server-private IP 1 key 7 password
ip tacacs source-interface Port-channel1
!
aaa authentication login default group profile local
aaa authentication enable default group profile
aaa authorization console
aaa authorization exec default group profile local
aaa authorization commands 15 default group profile local
aaa accounting exec default start-stop group profile
aaa accounting commands 0 default start-stop group profile
07-19-2016 07:27 AM
Ops...
Now i find it
24429 Could not establish connection with Active Directory!
But ACS and AD comunication are ok...
09-12-2016 08:21 AM
Connecting to a 3560 switch by chance?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide