Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
630
Views
0
Helpful
1
Replies

% Authorization failed.

Go to solution
adriatikb
Level 1
Level 1

‎08-21-2007 01:23 AM - edited ‎03-10-2019 03:20 PM

Can you help me to Understand that when I am adding aaa template to a switch which I am connected with telnet give me the error % Authorization failed

and accounting part is not unable to be added. Also is unable to connect to this switch again. Even username admin is added , The template was:

username admin password admin

aaa new-model

aaa authentication login default group tacacs+ local

aaa authentication enable default group tacacs+ enable

aaa authorization commands 0 default group tacacs+ local

aaa authorization commands 1 default group tacacs+ local

aaa authorization commands 15 default group tacacs+ local

aaa authorization exec default group tacacs+ local

aaa authorization config-commands

aaa accounting system default start-stop group tacacs+

aaa accounting exec default start-stop group tacacs+

aaa accounting commands 0 default start-stop group tacacs+

aaa accounting commands 1 default start-stop group tacacs+

aaa accounting commands 15 default start-stop group tacacs+

tacacs-server host 172.16.101.247 key X

Labels:
0 Helpful
1 Accepted Solution

Accepted Solutions

Go to solution
rochopra
Cisco Employee
Cisco Employee

‎08-21-2007 01:35 AM

change template to :

username admin password admin

aaa new-model

aaa authentication login default group tacacs+ local

aaa authentication enable default group tacacs+ enable

aaa authorization exec default group tacacs+ if-authenticated

aaa authorization commands 0 default group tacacs+ if-authenticated

aaa authorization commands 1 default group tacacs+ if-authenticated

aaa authorization commands 15 default group tacacs+ if-authenticated

aaa accounting system default start-stop group tacacs+

aaa accounting exec default start-stop group tacacs+

aaa accounting commands 0 default start-stop group tacacs+

aaa accounting commands 1 default start-stop group tacacs+

aaa accounting commands 15 default start-stop group tacacs+

tacacs-server host 172.16.101.247 key X

aaa authorization config-commands

Then try to add, this is happening cause you are enabling authorization but are logged in with unprivileged account.

~Rohit

View solution in original post

0 Helpful
1 Reply 1

Go to solution
rochopra
Cisco Employee
Cisco Employee

‎08-21-2007 01:35 AM

change template to :

username admin password admin

aaa new-model

aaa authentication login default group tacacs+ local

aaa authentication enable default group tacacs+ enable

aaa authorization exec default group tacacs+ if-authenticated

aaa authorization commands 0 default group tacacs+ if-authenticated

aaa authorization commands 1 default group tacacs+ if-authenticated

aaa authorization commands 15 default group tacacs+ if-authenticated

aaa accounting system default start-stop group tacacs+

aaa accounting exec default start-stop group tacacs+

aaa accounting commands 0 default start-stop group tacacs+

aaa accounting commands 1 default start-stop group tacacs+

aaa accounting commands 15 default start-stop group tacacs+

tacacs-server host 172.16.101.247 key X

aaa authorization config-commands

Then try to add, this is happening cause you are enabling authorization but are logged in with unprivileged account.

~Rohit

0 Helpful
Customers Also Viewed These Support Documents