Solved: TACACS and enable password

subharojdahal · ‎02-18-2009

hi folks.

I am able to login to my router VIA TACACS+ server. My username and password doesnot work with enable mode. When I do enable after login to user prompt; it just throws me "Authentication failed" message.

AAA commands used

aaa new-model

aaa authentication login default group tacacs+ local

aaa authentication enable default group tacacs+ enable

I set up TACACS+ server and key as it has been working with login.

I really appreciate if any one can help in this issue.

rgrds

subharose

Yudong Wu · ‎02-18-2009

I don't have ACS server in hand right now. But I believe that you need turn on something on ACS server so that you can have TACACS+ to authenticate on enable password. Just enable all TACACS+ feature under "Interface" then go throught each feature you have under user configuration to see which one might be related to it.

View solution in original post

Yudong Wu · ‎02-18-2009

I don't have ACS server in hand right now. But I believe that you need turn on something on ACS server so that you can have TACACS+ to authenticate on enable password. Just enable all TACACS+ feature under "Interface" then go throught each feature you have under user configuration to see which one might be related to it.

subharojdahal · ‎02-18-2009

thanks

I will try it now.

subharojdahal · ‎02-18-2009

thanks buddy

thumb's up for you.

Yudong Wu · ‎02-18-2009

Thanks, You are so quick. :)

glen.grant · ‎02-18-2009

You have it set up to use the enable secret or enable password for enable mode so you will have to use that otherwise change the second line so that the end also reads local instead of enable.