02-26-2024 11:14 PM
Hi ,
We apply same config to another switch and it is working.Its gives me below error. Kindly let me know what the error is it is.
SW-9200-KP-OOB-UCS(config)# aaa accounting default group PCCU-ISE
Error: AAA authorization failed AAA_AUTHOR_STATUS_METHOD=17(0x11)
S
02-26-2024 11:21 PM
sorry what is relate of aaa accouting with AAA authorization ?
can I see all aaa config in both SW
MHM
02-27-2024 11:19 PM
Hi ,
It relate to accounting.
The configuration as below,
feature tacacs+
!
tacacs-server host x.x.x.x key z.z.z.z
tacacs-server host y.y.y.y key z.z.z.z
tacacs-server timeout 15
tacacs-server deadtime 5
!
aaa group server tacacs+ PCCU-ISE
server x.x.x.x
server y.y.y.y
deadtime 10
use-vrf management
source-interface mgmt 0
!
aaa authentication login default group PCCU-ISE local
aaa authentication login console group PCCU-ISE local
aaa authentication login error-enable
aaa authorization config-commands default group PCCU-ISE
aaa authorization commands default group PCCU-ISE
aaa accounting default group PCCU-ISE
02-27-2024 01:40 PM
If you are using Cisco ISE, see the following guide with example configuration for Nexus platforms.
Cisco ISE Device Administration Prescriptive Deployment Guide
If that does not solve your issue, you will need to provide much more detail for any meaningful assistance. See How to Ask the Community for Help.
If this is a Production issue, contact TAC for the quickest resolution.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide