WS-C3548-XL http access via tacacs+

[cburgarella]

Hi all,

I have to enable login via tacacs+ on some 2950 switches ( ios 12.0(5.2)XU).

actually i can access the home page and i'm authenticated via tacacs at non privileged mode.

The problem is that when i try to open cluster manager it ( a java applet ) ask for a level 15 access username and password. no one tacacs+ or local pair value works.

what i have to do?

commands inserted:

aaa new-model

aaa authentication login default group tacacs+ enable

aaa authentication enable default group tacacs+ enable

aaa authorization exec default group tacacs+ local

aaa authorization network default local

aaa accounting exec default start-stop group tacacs+

aaa accounting commands 15 default start-stop group tacacs+

aaa accounting connection default start-stop group tacacs+

aaa accounting system default start-stop group tacacs+

........

ip http server

ip http authentication aaa

Thank's

[sghosh]

Hi,

We have a bug filed for this issue CSCds27312, but as of now I am not aware of a solution.

Thanks

Sujit

[pvanvuuren]

I suggest take out the command line:

aaa authentication enable default group tacacs+ enable

and add these two lines:

aaa authorization exec default group tacacs+ if-authenticated

aaa authorization commands 15 default group tacacs+ if-authenticated