I set a Catalyst 2950 switch to the console port authentication is THROUGH the ACS, in case of failure to use the local user base, works well.
the problem is with a 2950-XL switch, which does not support the command aaa authorization console, I can do?
the configuration is:
username admin privilege 15 password 0 123456
aaa authentication login default group tacacs+ local
aaa authentication login CONSOLE local
aaa authorization config-commands
aaa authorization exec default group tacacs+ local
aaa authorization exec CONSOLE local
aaa authorization commands 0 default group tacacs+ if-authenticated
aaa authorization commands 1 default group tacacs+ if-authenticated
aaa authorization commands 15 default group tacacs+ if-authenticated
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 0 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting connection default start-stop group tacacs+
aaa accounting system default start-stop group tacacs+
line con 0
authorization exec CONSOLE
login authentication CONSOLE
i try to access the switch:
Username: admin
Password: ******
SWAdmin5>en
Password:
% Access denied
SWAdmin5>
suggestions friends "
