04-29-2018 02:11 AM - edited 03-08-2019 02:50 PM
Hi All,
I am having issue with TACACS login via console
It is working fine though telnet but no with console
IOS version is: 03.04.03.SG
below is the running-config:
username quadmin privilege 15 secret 5 $1$UKtG$FWXajucKFlC8WKweQFPrS/
aaa new-model
!
!
aaa authentication login default group tacacs+ local
aaa authentication enable default group tacacs+
aaa authorization console
aaa authorization exec default group tacacs+ local if-authenticated
aaa authorization commands 0 default group tacacs+ none
aaa authorization commands 1 default group tacacs+ if-authenticated
aaa authorization commands 15 default group tacacs+ local if-authenticated
line con 0
stopbits 1
line vty 0 4
password 7 02050D480809
transport input ssh
line vty 5
password 7 110A1016141D
transport input ssh
line vty 6 15
transport input ssh
Solved! Go to Solution.
04-29-2018 04:22 AM
Hello,
try the below:
aaa new-model
aaa authentication login default group tacacs+ local
aaa authentication login console group tacacs+ local
aaa authentication enable default group tacacs+
aaa authorization console
aaa authorization exec default group tacacs+ local if-authenticated
aaa authorization exec console group tacacs+ local if-authenticated
aaa authorization commands 0 default group tacacs+ none
aaa authorization commands 1 default group tacacs+ if-authenticated
aaa authorization commands 15 default group tacacs+ local if-authenticated
!
line con 0
exec-timeout 5 0
login authentication console
authorization exec console
stopbits 1
04-29-2018 04:22 AM
Hello,
try the below:
aaa new-model
aaa authentication login default group tacacs+ local
aaa authentication login console group tacacs+ local
aaa authentication enable default group tacacs+
aaa authorization console
aaa authorization exec default group tacacs+ local if-authenticated
aaa authorization exec console group tacacs+ local if-authenticated
aaa authorization commands 0 default group tacacs+ none
aaa authorization commands 1 default group tacacs+ if-authenticated
aaa authorization commands 15 default group tacacs+ local if-authenticated
!
line con 0
exec-timeout 5 0
login authentication console
authorization exec console
stopbits 1
05-06-2018 10:56 PM
Its working fine now, thank you.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide