Hi,
I try to assign, using CiscoSecure ACS2.3.6, different enable passwords for different NASes.
And I fail. The following config should, at
least according to my understanding, assign
enable password **** to NAS 10.1.1.1.
But this password is also usable on other NASes.
Why ?
Group Profile Information
group = aaa{
privilege = des "****" 15 "10.1.1.1" ".*" ".*"
default attribute=permit
default service=permit
}
User Profile Information
user = xjku{
member = aaa
password = des "********"
}
NASes config:
aaa new-model
aaa authentication login default local group tacacs+
aaa authentication enable default group tacacs+ enable
aaa authorization exec default local group tacacs+
