ACS Fallback

[eyadgharaibah]

Hi 
i'm Trying to config ACS Fallback on cisco Switch for telnet  , but no luck to work
please find the Switch Configuration

!

!

username cisco privilege 15 password 0 cisco

aaa new-model

aaa authentication login Admin group tacacs+ local

aaa authorization config-commands

aaa authorization exec Admin group tacacs+ local

aaa authorization commands 1 Admin group tacacs+

aaa authorization commands 15 Admin group tacacs+ local

tacacs-server host 150.1.7.30 key ccie

tacacs-server directed-request

!

privilege configure level 15 interface
privilege configure level 15 no shutdown
privilege configure level 15 shutdown
privilege exec level 15 show version
privilege exec level 15 show privilege
privilege exec level 15 show ip interface brief
privilege exec level 15 configure terminal
privilege exec level 15 show running-config

aaa new-model

aaa authentication login Admin group tacacs+ local

aaa authorization config-commands

aaa authorization exec Admin group tacacs+ local

aaa authorization commands 1 Admin group tacacs+

aaa authorization commands 15 Admin group tacacs+ local

tacacs-server host 150.1.7.30 key ccie

tacacs-server directed-request

!

privilege configure level 15 interface
privilege configure level 15 no shutdown
privilege configure level 15 shutdown
privilege exec level 15 show version
privilege exec level 15 show privilege
privilege exec level 15 show ip interface brief
privilege exec level 15 configure terminal
privilege exec level 15 show running-config

[nspasov]

Hi there, what do you have configured in your vty lines? You can get the output with

show run | sec line

Thank you for rating helpful posts!

[eyadgharaibah]

@Neno Spasov 

line vty 0 4

authorization commands 1 Admin

authorization commands 15 Admin

authorization exec Admin

login authentication Admin

line vty 5 15

authorization commands 1 Admin

authorization commands 15 Admin

authorization exec Admin

login authentication Admin

!

end

[nspasov]

Sorry for the delay here. I have a couple of more questions:

1. What exactly happens when you test this? Does the process fail during authentication or authorization?

2. How do you test the unavailability of the AAA serve

Thank you for rating helpful posts!