ISE version 1.0 - Unable to get management access for cisco devices

[shinde_hanu]

Hi All,

I want to manage all cisco devices with read and write privilege with ISE 1.0.

Is this functionality is available in this version?

I configured the 2960 switch.  On switch  redius test is successful. When I telnet to the switch, it ask for username and password. But message is authorization fail. But on ISE shows authentication is successful.

Is it configuration issue or this feature is not available in this version?

Regards,

Hanumant

[Tarik Admani · Accepted solution]

Hanumant,

You will have to create an authorization profile to send back the privilege level for the user:

Here is the attribute (cisco-av-pair) you will have to send back:

shell:priv-lvl=xx

[shinde_hanu]

Hi Tarik,

Thank you very much.

I today checked and now get the management access for cisco devices.

Hanumant