ACS authorization query

sachin_mon · ‎03-09-2008

Hi,

I would like to know what are the configurations required in Cisco ACS for authorization.

I have done the foll configurations in the switch.

aaa authorization config-commands

aaa authorization exec default group tacacs+ local

radius-server host 10.240.252.247

radius-server key greenland.123

Thanks.

Rgds.,

Sack

royalblues · ‎03-10-2008

Sachin,

Are you trying to authenticate and authorise your devices via Tacacs or Radius?

The AAA configuration defines the authorization group as tacacs whereas the server is configured for radius

aaa authorization exec default group radius local

On the ACS server it is very simple.

Go to Network configuration

choose a NDG and add the client

Fill in the details and choose authenticate using tacacs or radius

HTH

Narayan

sachin_mon · ‎03-10-2008

Hi Narayan,

Sorry, I pasted the wrong configurations in the forum.Actual configurations in the device are as follows:

aaa authorization config-commands

aaa authorization exec default group radius local

radius-server host 10.240.252.247

radius-server key xxx

I would like to know what are the configurations required in the ACS server with respect to authorization as we are using radius.Do we need to add anything else apart from adding the client in ACS..?

Thanks.

Rgds.,

Sachin