03-01-2023 06:13 AM
This is my aaa configuration:
!
aaa authentication login default group ISE-TACACS local
aaa authorization config-commands
aaa authorization exec default group ISE-TACACS local
aaa authorization commands 0 default group ISE-TACACS local
aaa authorization commands 1 default group ISE-TACACS local
aaa authorization commands 15 default group ISE-TACACS local
aaa accounting exec default start-stop group ISE-TACACS
aaa accounting commands 0 default start-stop group ISE-TACACS
aaa accounting commands 1 default start-stop group ISE-TACACS
aaa accounting commands 15 default start-stop group ISE-TACACS
aaa accounting connection default
aaa session-id common
!
Now I configure the following commands under the line vty 0 15:
!
login authentication default
authorization commands 0 default
authorization commands 1 default
authorization commands 15 default
authorization exec default
!
Now I want to verify the configuration under the line vtys:
As you can see, nothing appears. Is this normal?
Thanks
Solved! Go to Solution.
03-01-2023 06:16 AM
@rezaalikhani that is normal for the default method list you are using.
If you create a custom method list and reference that under the VTY lines, that will be displayed.
03-01-2023 06:16 AM
@rezaalikhani that is normal for the default method list you are using.
If you create a custom method list and reference that under the VTY lines, that will be displayed.
03-01-2023 06:18 AM
Thanks for your reply;
So after configuring aaa commands using "default" method list, it does not require to apply them under VTY lines. Correct?
03-01-2023 06:29 AM
@rezaalikhani no you don't need to.
03-01-2023 06:47 AM
I think using the command "show run all" will show you the default values that you won't see when you use the command "show run".
03-01-2023 06:51 AM
Thanks for your reply;
Unfortunately, after applying the aaa commands under line vty, executing "show run all" does not show the applied commands!
03-01-2023 07:00 AM - edited 03-01-2023 07:04 AM
@rezaalikhani I double checked myself, "show run all" does not confirm the default method list is in use - when it is used. If you define a custom method list, this is displayed under the VTY lines when you run "show run all"
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide