I want to authenticate telnet connections with TACACS +.
This is my router configuration settings:
aaa new-model
aaa authentication login telnetssh group tacacs+ enable local
!
aaa session-id common
tacacs-server host 10.10.10.5
tacacs-server host 10.10.10.6
tacacs-server directed-request
tacacs-server key superclave
line vty 0 4
password CISCO
logging synchronous
login authentication telnetssh
transport input ssh
!
no cns aaa enable
The configuration in the ACS 4.1 is very simple, just set the following
===================
USER SETUP:
User: PRUEBA
User Setup:
Password Autehntication -> ACS Internal Database
PAP password/password
Group to which the user is assigned -> Grupo 1
Callback -> User group setting
Client IP Address Assignement -> Use group setting
Account Disable -> Never
Advanced TACACS+ Settings
TACACS+ Enable Control: -> Use Group Level Setting
TACACS+ Enable Password -> Use CiscoSecure PAP password
======================
GROUP SETUP:
Group Setup: Grupo 1
All default, except:
TACACS+Settings
Choice: Shell (exec)
Shell Command Authorization Set -> None
======================
In Network Configuration create a new client AAA
AAA client IP Address -> "ip_router"
Shared Secret superclave
Authenticate Using => TACACS + (Cisco IOS)
================
It doesn't work. What may be happening? Missing settings in the ACS?
