IPS roles using ACS 5.2

[adriansales]

Hi Guys,

I am currently configuring Ips roles on my ACS 5.2. The authentication works fine but it seems that my "viewer role" is not working. I have already configured the cisco-av-pair attribute with "ips-role=viewer" and bound it to my rule using authorization profiles. Any ideas?

Regards,

Adrian

[mkodali]

Hi Adrian

What error message do you get when trying to login as viewer? Make sure the default role on the sensor is left blank under service aaa and you have defined only one role on the ACS5.2 for this particular user.

Madhu