We are implementing Role-Based CLI Access across a number of routers and switches using RADIUS authentication and authorization. When authentication occurs, the RADIUS server also returns the proper view name for the Role-Based authorization, so the user is put immediately into that view and has capabilities according to that view's configuration on the client device. This all is working just fine.
But there is an issue with Cisco Prime LMS 4.2.4 NetConfig. Cisco Prime has credentials on the RADIUS server that give it both privilege level 15 and view "root", which means that it is put immediately into view root when it logs into client devices. When trying to run a NetConfig job, whether in config mode or enable mode, the job apparently always tries to enter enable mode, which is unnecessary, and fails with the error
ERROR:CONFIG_CDL1031:Transport session to device failed Could not enter ENABLE Mode from USER Mode on Device.
This has also been tried with Cisco Prime Infrastructure 3.1.1 and fails with the same type of error.
In both LMS and Infrastructure, the configuration job fails when trying to go to enable mode from user mode even though it is already in view root when it first logs in. Why is it doing this unneeded step and how can this step be skipped?
Hi everyone.I have a problem in my Network.So i have 3 routers and a firewall in my topology. I have configured OSPF and all routers works expect R3 (see in the image below)When I watch my neignbor in R3 it says :192.168.7.7 1 INIT/DROTHER 00:00:37 10.0.2...
Host Onboarding is the term used when connecting an endpoint (hosts , IOT , Other devices) to the fabric , and can be accomplished in a couple of ways.One option is the "static" approach as oppose to the dynamic and secure approach using&nbs...
good morning I have this report from users, saying that they encounter connection issue only when they are wired , but the wireless I fine. both connection are using the same path to the internet ...please advised a troubleshooting plan.
Enterprise Switching Business Unit is glad to announce Beta release 16.12.3 for all Catalyst 9200/9300/9400/9500/9600. This release is made available to allow users to test, evaluate and share feedback before General Avail...