I'm having difficulty getting our Cisco ACS server to authenticate access to our Nexus 7000 switch. I think the TACACS+ is set up correctly on the Nexus as when I enter my password incorrectly on the Nexus I see this in the ACS logs. The problem is when I enter my password correctly on the Nexus I get an access denied message. The set up on the ACS is very simple and works for fine for our current IOS router and switches, the aaa config on our IOS router and switches is below. On the ACS we have a group for users which allow privilege level 15, full access. We
aaa new-model
aaa authentication login default group tacacs+ enable
aaa authentication enable default group tacacs+ enable
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
The config on the Nexus is below. Will I need to change the set up on the ACS or do I need additional settings on the Nexus. The ACS version is quite old, v3.3. We only have one vdc on the Nexus.
feature tacacs+
tacacs-server key 0 test
tacacs-server host 10.128.46.50
aaa group server tacacs+ TacServer
server 10.128.46.50
aaa authentication login default group TacServer
aaa accounting default group TacServer
feature tacacs+
tacacs-server key 0 test
tacacs-server host 10.128.46.50
aaa group server tacacs+ TacServer
server 10.128.46.50
