tacacs+ authorization

[fvramirez]

i cant control aaa authorization using win2k tacacs+. i have the following commands on my router:

aaa new-model

aaa group server tacacs+ ciscosecure

aaa authorization config-commands

aaa authorization exec ciscosecure group tacacs+

aaa authorization network ciscosecure group tacacs+

if it is authentication it is okay, i can even control time of day login. only authorization problems, i need to set groups for users to belong

thanks

francis

[mhoda · Accepted solution]

Hello Francis,

You need to add the following line/lines for the command authorization on the router -

aaa authorization commands 0 default group tacacs+

aaa authorization commands 1 default group tacacs+

aaa authorization commands 15 default group tacacs+

Thanks,

Mynul