Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

tacacs+ authorization

i cant control aaa authorization using win2k tacacs+. i have the following commands on my router:

aaa new-model

aaa group server tacacs+ ciscosecure

aaa authorization config-commands

aaa authorization exec ciscosecure group tacacs+

aaa authorization network ciscosecure group tacacs+

if it is authentication it is okay, i can even control time of day login. only authorization problems, i need to set groups for users to belong

thanks

francis

1 ACCEPTED SOLUTION

Accepted Solutions
Silver

Re: tacacs+ authorization

Hello Francis,

You need to add the following line/lines for the command authorization on the router -

aaa authorization commands 0 default group tacacs+

aaa authorization commands 1 default group tacacs+

aaa authorization commands 15 default group tacacs+

Thanks,

Mynul

1 REPLY
Silver

Re: tacacs+ authorization

Hello Francis,

You need to add the following line/lines for the command authorization on the router -

aaa authorization commands 0 default group tacacs+

aaa authorization commands 1 default group tacacs+

aaa authorization commands 15 default group tacacs+

Thanks,

Mynul

156
Views
0
Helpful
1
Replies
CreatePlease login to create content