07-01-2008 11:00 PM - edited 03-03-2019 10:34 PM
Hi...We have configered the router in TACACS but we are not able to go on enable mode .
Router ver - 11.3(2)
please find below config
aaa authentication login default group tacacs+ local
aaa authentication login authtac group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa authorization commands 0 default group tacacs+ local if-authenticated none
--More-- aaa authorization commands 1 default group tacacs+ local if-authenticated none
aaa authorization commands 15 default group tacacs+ local if-authenticated none
aaa accounting commands 0 default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa session-id common
Please correct us , If config need to be modified and add new one .
Thanks...
07-01-2008 11:08 PM
aaa authorization exec default group tacacs+ local
07-01-2008 11:52 PM
thanks narayan , however we are still getting below error on router ...
Router>en
Password:
% Error in authentication.
07-02-2008 02:39 AM
Hi,
is it possible to have the full conffigs of the router ?
What about console same error ?
Regards,
Pravin
07-02-2008 07:54 AM
mansoor
From your post it appears that you are authenticating ok to user mode and having a problem with authentication to enable mode. Can you verify that this is the case?
My first guess at the problem is that the user ID that you use to login is not set up in TACACS for enable access on this device. Can you tell us how this user ID is set up in TACACS (and especially whether this user ID is set up with enable access for this device)?
HTH
Rick
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: