cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Who Me Too'd this topic

Integrate Cisco ACE into AAA TACACS+

Bela Mareczky
Level 1
Level 1

Dear Community!

I would like to configure Cisco ACE 4710 CLI and WebAmin to use ACS v4.2 TACACS+ authentication and accounting feature. After found a Cisco document, which describes ACE AAA features (http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA3_1_0/configuration/security/guide/aaa.html), I have setup all configuration parameters mentioned in this document, everything seems to be OK.

But...

I have a TACACS+ group named "Network Administrators", which has privilege level 15 option enabled, so admins do not have to type enable password when authenticating. After setting up ACE AAA, the prvilege level 15 option stops working, while logging in Cisco routers: after authentication, the user remains in privilege level 1.

Logging in Cisco switches seems to be OK, stepping immediately to level 15 as usual.

I tried upgrading IOS in a router, but no luck...

Does anybody have any experiance about this "bug"?

Thanks in advance!

Regards,

Belabacsi

@ Budapest, Hungary

Who Me Too'd this topic