cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1082
Views
5
Helpful
1
Replies

ISE 2.7 Trial version Not working with Cisco 2911 router.

okoroji80
Level 1
Level 1

Hello Support Group.,

 

I recently installed ISE 2.7 trial version for a demo before full licencing .

 

Its confirmed that the Switching are working well as users can authenticate into them.

 

but the router ( Cisco 2911)  cannot be logged into using the same ISE configureation

 

below is my config on both devices:

 

enable password come
!
username call privilege 15 password 0 come
aaa new-model


tacacs-server host 20.10.15.75 single-connection timeout 3 key b3rN3t123

 


aaa group server tacacs+ ISE-DMO
server 20.10.15.75
server-private 20.10.15.75 key  b3rN3t123
!
aaa authentication login default group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa authorization exec default group tacacs+ local
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 7 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
!

 

line con 0
line vty 0 4
password come
line vty 5 15
password come
!
end

Let me know if there's any error in the config and what i need to do to rectify the issues

thanks

1 Reply 1

Jatin Katyal
Cisco Employee
Cisco Employee

Replace the default group name 'tacacs+' with ISE-DMO' in the following commands:

 

'aaa authentication login default group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa authorization exec default group tacacs+ local
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 7 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+

 

If you're going to test with telnet or ssh. You need another command under line vty.

 

line vty 0 15

transport input all

~Jatin
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: