Adding Nexus 5596 to ACS v4.2

[richmondk]

Hi.  Does ACS v4.2 support the addition of the Nexus switches?  We have a few new Nexus devices that have been added to ACS, but cannot be accessed successfully.  A msg re: role based authentication is received.  Do I have to do something special in ACS to support this?

Nexus 5596 v5.1(3)N2(1)

Thanks!

[Amjad Abdullah]

What type of configuration you use (you use device restriction or something under the user or the group?)

When do you exactly see the error message? after or before providing the credentials?

What you see in the failed attempts on the ACS logs?

Rating useful replies is more useful than saying "Thank you"

[richmondk]

Hi.  Thanks for the response. 

We're using the Group as the authority for authentication.

The error message is seen after the credentials are entered.  It says the authentication servers are unreachable.

There are two errors in the ACS logs - the username was wrong and the password was wrong.

I'm working with TAC on it now, but the solution they provided doesn't work so far.

[Oleksandr Nesterov]

Hi Keely

Please check the following lins about nexus configuration:

http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/troubleshooting/guide/n5K_ts_sec.html

http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/configuration/guide/cli/sec_aaa.html

ACS should use cisco-av-pair attribute for nexus devices.

HTH,

Alex

[richmondk]

Hi Alex.  Thanks for the information.  I've passed it along to my co-worker who's responsible for the Nexus config.  Hopefully, it will get us on the right path.

~Keely