06-29-2011 09:04 AM - edited 03-10-2019 06:11 PM
Hi all,
I am working on getting ACS to authenticate VPN users. I have a wireless/TACACS policy in place and working.
Can someone help me with the set up of the Authorization profile as well as the policy?
Thanks,
Randy
Solved! Go to Solution.
07-02-2011 10:09 PM
Hi Randy,
Please follow the following:
Network Resources > Network Devices and AAA clients > Create
1. Enter a name
2. Ip adrress
3. TACACS enable
4. enter shared secret key
5. Submit
Policy elements > Authorization and permissions > Device Administrator > Shell Profile > Permit Access
Access policy > Default Device Admin > Authorization > Customize
1.move Device IP address from the customize Conditions to Selected
2. ok
Access policy > Default Device Admin > Authorization > Create >
1. Name (give a name)
2. Status > enabled
3. Select a Condition i.e. Device ip address
4. enter the ip address of the NAS used for VPN termination.
5. Results > Shell Profile > Permit Access
6. OK
Hope this helps.
Regards,
Anisha
P.S.: please mark this thread as answered if you feel your query is resolved. Do rate helpful posts.
07-02-2011 10:09 PM
Hi Randy,
Please follow the following:
Network Resources > Network Devices and AAA clients > Create
1. Enter a name
2. Ip adrress
3. TACACS enable
4. enter shared secret key
5. Submit
Policy elements > Authorization and permissions > Device Administrator > Shell Profile > Permit Access
Access policy > Default Device Admin > Authorization > Customize
1.move Device IP address from the customize Conditions to Selected
2. ok
Access policy > Default Device Admin > Authorization > Create >
1. Name (give a name)
2. Status > enabled
3. Select a Condition i.e. Device ip address
4. enter the ip address of the NAS used for VPN termination.
5. Results > Shell Profile > Permit Access
6. OK
Hope this helps.
Regards,
Anisha
P.S.: please mark this thread as answered if you feel your query is resolved. Do rate helpful posts.
07-03-2011 01:04 AM
Hello Randy,
Moving this thread in AAA forum.
Thanks,
Vinay Sharma
Technical Community manager - Wireless
07-04-2011 04:40 AM
Anisha,
Thanks so much for your response. I got it all set up now and authenticating correctly.
Cheers,
Randy
07-04-2011 05:14 PM
Hi Randy,
That is great to hear.
Please mark this post as answered so that it may be of help to others.
Regards,
Anisha
-Do rate helpful posts
07-05-2011 04:29 AM
Anisha,
Thanks again, i rated your post and marked it as correct. I am new to these forums but they are very very helpful.
/Randy
07-05-2011 04:32 AM
Thank you Randy..!
Keep your questions and queries pouring in! :-)
Anisha
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide