Difference between Radius and Tacacs enable mode ?

[jazzzz]

Hi,

I'm switching from radius to tacacs authentication via ACS3.2. Previously when i'm using radius, going to previledge mode uses the default $enab15$ as the username.

Now when i configure using tacacs, i'm unable to go into previledge mode. It will prompt for authentication error. Just wondering if tacacs also uses $enab15$ to go into previledge mode ?

Any advise on how to configure tacacs previlege mode?

Tks !!

===== My tacacs config =====

aaa new-model

aaa group server tacacs+ SW_Tacac

server 10.90.3.106

tacacs-server host 10.90.3.106

tacacs-server key 8888

aaa authentication login SW_Tacac group SW_Tacac local

aaa authentication enable default group SW_Tacac line

aaa authorization network SW_Tacac group SW_Tacac local

aaa accounting network SW_Tacac wait-start group SW_Tacac

line vty 0 4

exec-timeout 0 0

login authentication SW_Tacac

===================================

[ovt]

No, T+ doesn't use $enab15$. You can configure separate enable password and max privilege level per user. Enable Advanced T+ Features under Interface Configuration and configure this in User Setup.

HTH