AAA 7010 nexus issue

[sumani1984]

AAA failed nexus7010

and local username error

# sh run

Error: AAA authorization failed AAA_AUTHOR_STATUS_METHOD=17(0x11)

[Jatin Katyal]

Can you share the show run?

Is NX 7010 intregrated with TACACS server or its configured for local authentication/authorization?

Did you issue the aaa authorization commands on the switch?

Do you have any local user configured with "network-admin" role?

~BR
Jatin Katyal

**Do rate helpful posts**

[sumani1984]

nexus 7010: AAA failed

but local username

sh run

Error: AAA authorization failed AAA_AUTHOR_STATUS_METHOD=17(0x11)

we configured this at nexus 7010  & failed

tacacs-server key 7 "admin123"

tacacs-server host *.*.*.*

tacacs-server host *.*.*.*

aaa group server tacacs+ tacacs+

    server *.*.*.* 

    server *.*.*.* 

    deadtime 10

    source-interface Vlan**

aaa authentication login default group tacacs+

aaa authentication login console group tacacs+

aaa authorization config-commands default group tacacs+

aaa authorization commands default group tacacs+

aaa authorization config-commands console group tacacs+

aaa authorization commands console group tacacs+

aaa accounting default group tacacs+

[sumani1984]

we are using ACS 5.4

if u have any idea pls guide

thanks in adv

[Jatin Katyal]

Are you able to access the switch using local credetials? If yes can you provide the "debug tacacs", "debug aaa authen" and "debug aaa author" and show version from the switch.

Also, what all configuration do you have on the ACS side for the NX7K?

~BR
Jatin Katyal

**Do rate helpful posts**

[sumani1984]

local login

# sh run

Error: AAA authorization failed AAA_AUTHOR_STATUS_METHOD=17(0x11)

ACS

[sumani1984]

ACS key mismatch

[Jatin Katyal]

so there was an issue with key mis-match?  Did you figure out the same in the debug outputs?

~BR
Jatin Katyal

**Do rate helpful posts**

[Jatin Katyal]

Was that an issue with shared secret mis-match? were you able to find that in the tacacs debugs?