AAA - TACACS.net Authorisation and Accounting setup

[Richard Tapley]

Hi,

Wonder if someone can advise on a hopefully quick problem.

I have installed and setup TACACS+ and for authentication it is working, I can use Windows AD server to authenticate users but now need to restrict commands from certain users. I cannot seem to get the setup to take so that it restricts the setup.....

I have attached the 3 main config files but if you need something else let me know.

Many thanks

[Jatin Katyal]

Did you get a chance to review the below mentioned doc's.

ACS 5.x

http://www.cisco.com/en/US/products/ps9911/products_configuration_example09186a0080bc8514.shtml

ACS 4.x

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml

~BR
Jatin Katyal

**Do rate helpful posts**

[Richard Tapley]

Hi Jatin,

Thanks for the reply.

That look specific to ACS which I don't have a copy of and if I understand correctly you can only get through haveing a contract or subscripition.

Because of the cost I am looking at the TACACS.net which is a free version.

thanks

[Richard Tapley]

Anyone able to help with this....

The instructions contradict the notes in the  configuration files and items that are i nthe config file are ignored  and items that aren't in the config are blocked and I am lost....

Any help appreciated..