cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

521
Views
5
Helpful
1
Replies
Highlighted
Beginner

ISE 2.7 Trial version Not working with Cisco 2911 router.

Hello Support Group.,

 

I recently installed ISE 2.7 trial version for a demo before full licencing .

 

Its confirmed that the Switching are working well as users can authenticate into them.

 

but the router ( Cisco 2911)  cannot be logged into using the same ISE configureation

 

below is my config on both devices:

 

enable password come
!
username call privilege 15 password 0 come
aaa new-model


tacacs-server host 20.10.15.75 single-connection timeout 3 key b3rN3t123

 


aaa group server tacacs+ ISE-DMO
server 20.10.15.75
server-private 20.10.15.75 key  b3rN3t123
!
aaa authentication login default group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa authorization exec default group tacacs+ local
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 7 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
!

 

line con 0
line vty 0 4
password come
line vty 5 15
password come
!
end

Let me know if there's any error in the config and what i need to do to rectify the issues

thanks

1 REPLY 1
Highlighted
Cisco Employee

Replace the default group name 'tacacs+' with ISE-DMO' in the following commands:

 

'aaa authentication login default group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa authorization exec default group tacacs+ local
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 7 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+

 

If you're going to test with telnet or ssh. You need another command under line vty.

 

line vty 0 15

transport input all

~Jatin
Content for Community-Ad