01-30-2024 04:45 AM
I have a catalyst WS-C3850-48U-S that has some problem with getting it to enable mode. I am getting the below error,
XXX-XXX-XXX-X>en
% Authorization failed.
I tried to console the switch and it is the same. Is there a way I can get into the switch and check its config.?
Thank you in advance.
01-30-2024 05:38 AM - edited 01-30-2024 05:39 AM
if you use ISE push priv 15 to SW
cisco-av-pair = priv-lev=15 <<- this need to add in ISE
if you can not enter enable priv 15 then adjust the authz in SW is impossible, try solution from ISE
MHM
01-30-2024 05:43 AM
As @MHM Cisco World mentioned another option would be to change TACACS profile in ISE to push privilege 15 for example down to the switch. If you check your authorization rule in ISE you should see a profile associated next the rule to the right. You can check what privilege level is configured as the default in that profile, it would be something different than 15. If you don't want to change the settings of this original profile, then you can clone it and set the default privilege and the maximum to be level 15. And then you associate this profile to the authorization rule, this should place you in privilege level 15 when you log into the switch.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide