cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
682
Views
2
Helpful
16
Replies

Authorization Issue

JAISONTHOMAS
Level 1
Level 1

I have a catalyst WS-C3850-48U-S that has some problem with getting it to enable mode. I am getting the below error,

XXX-XXX-XXX-X>en
% Authorization failed.

I tried to console the switch and it is the same. Is there a way I can get into the switch and check its config.?

Thank you in advance.

16 Replies 16

if you use ISE push priv 15 to SW 
cisco-av-pair = priv-lev=15      <<- this need to add in ISE 

if you can not enter enable priv 15 then adjust the authz in SW is impossible, try solution from ISE 

MHM

As @MHM Cisco World mentioned another option would be to change TACACS profile in ISE to push privilege 15 for example down to the switch. If you check your authorization rule in ISE you should see a profile associated next the rule to the right. You can check what privilege level is configured as the default in that profile, it would be something different than 15. If you don't want to change the settings of this original profile, then you can clone it and set the default privilege and the maximum to be level 15. And then you associate this profile to the authorization rule, this should place you in privilege level 15 when you log into the switch.