When I log into a Cisco device, I am prompeted to enter username/password. Once authenticated, I have to enter the "enable" command and then enter my password again in order to gain privileged mode access. I want to be able to to go to priv mode directly.
My AAA configuration looks like this:
aaa authentication login default group tacacs+ local
aaa authentication login ciscoadmins group tacacs+ local
aaa authentication enable default group tacacs+
aaa authorization config-commands
aaa authorization exec ciscoadmins group tacacs+ local if-authenticated
aaa authorization commands 1 default group tacacs+ local
aaa authorization commands 15 ciscoadmins group tacacs+ local
aaa authorization network default group tacacs+
aaa authorization network ciscoadmins group tacacs+
On my ACS SE (ver 4.1.4.13), I have both the User and Group setting configured the same for the TACACS+ section with SHELL (exec) checked and PRIV Level checked and the value set to 15.
I can get this to work with RADIUS but have not been successful with TACACS+.
Does anyone have a solution for this?
Thanks,
Keith
