Hi, we have recently installed Cisco DCNM 11.2.1 and enabled AAA with Cisco ISE as TACACS+ server. At the Cisco ISE server I have configured the TACACS profile with the custom attribute set to Mandatory name shell:roles and value network-admin. Authentication works fine, so I can login, only not as an admin. In the tacacs log there are messages that the right tacacs profile is selected and the attribute is send in the response:
All Request Attribues
All Response Attribues
and the response is also send, it does mention AVPair not cisco-av-pair, so maybe that is the problem:
To participate in this event, please use the button to ask your questions
This special event - formerly known as Ask the Expert- is open only to Cisco Customers and Partners.
Many pages in the Cisco Community are acce...
About this webinar
Cisco Application Centric Infrastructure (ACI) is designed API first, making it an automator’s, developer’s and programmer’s dream. When every aspect of a product is available via an API, there is no limit to the scale, robustnes...
Community Live - Application Centric Infrastructure: Introduction and Configuration Best Practices
This special event - formerly known as webcast- is open only to Cisco Customers and Partners.
Many pages in the Cisco Community are accessible o...