ACS INTERNAL USER issue with 4.2.(1) build 15

[Jean Paul Enerst]

Hi all,

            I am facing an issue with my ACS server, nothing to difficult,but which bug me. I have an internal user, this user is able to access some cisco devices and can't access some. There is no Network access Restrict set for the username. The log shows when access is granted to a device, the server map the user to correct user group; however,when the user fails authentication the log shows default user group! which indicate that the user not always map to the correct user group.

Thanks for the help,

Jean Paul---

[Jatin Katyal]

The problem you're running in clearly indicates that either Network access restriction or Network access policies is configured for an user or group. Since you're positive that there is nothing configured on the NAR, lets narrow it down via logs.

Duplicate the issue again with both the devices (working and non-working)

With working devices, you would get the passed attempts >> copy and paste the log attempt as it is.

With Non-working device, you would see failed attempt >> copy and paste the log attempt as it is.

Regards,

Jatin

Do rate helpful posts-