I set up tacacs+ authorization on the WDS and it works great. When I tried to set it up on the infrastructure ap1200 I am unable to login unless it is as a locally defined user. I have attached some config info from the infrastructure AP Version 12.2(15)JA. I am using ACS 3.3
aaa new-model
!
!
aaa group server tacacs+ tac_admin
server 10.2.57.82
!
aaa group server tacacs+ tac_acct
server 10.2.57.82
!
aaa authorization exec default local group tac_admin
aaa authorization exec ap_exec group tac_admin local
aaa accounting exec default start-stop group tacacs+ group tac_admin
-------------------------------------------
aaa session-id common
dot11 aaa csid unformatted
dot11 network-map
dot11 arp-cache optional
-------------------------------------------
tacacs-server host 10.2.57.82 single-connection port 49 key a-!kGB9qr0H
tacacs-server directed-request
-------------------------------------------
wlccp ap username SetrusAdrU password 7 150B3508162B6605176A662303
-------------------------------------------
line con 0
line vty 5 15
authorization exec ap_exec
I am not receiving any passed or failed logs on the ACS or in the TACACS administration log. Any help would be appreciated.
