Hi all
I have CiscoSecure ACS 3.0 installed on Win2000 server
for AAA. The router is 2611 acting as AAA Client .The
clent is being authenticated but the moment I
configured it for Authorisation,the authentication
fails.What could be the problem .I am forwarding
herewith the configuration as under.
version 12.0
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Ciscosecure
!
aaa new-model
aaa authentication login group1 group tacacs+
aaa authentication ppp default group tacacs+
aaa authentication ppp group1 group tacacs+
aaa authorization config-commands
aaa authorization commands 1 group1 if-authenticated
group tacacs+
aaa authorization network group1 if-authenticated
group tacacs+
tacacs-server host 129.1.0.42
tacacs-server attempts 4
tacacs-server timeout 20
tacacs-server key ciscosecure
line con 0
transport input none
line aux 0
line vty 0 2
exec-timeout 0 0
password 7 045D071F062F4B
login authentication group1
line vty 3 4
password 7 045D071F062F4B
login authentication group1
!
no scheduler allocate
end
I am also forwarding herewith the output on router
with debug aaa authorization enabled.
What could be the problem ?
Thanks in advance..
Piyush Shah
Ciscosecure#
03:28:20: AAA: parse name=tty67 idb type=-1 tty=-1
03:28:20: AAA: name=tty67 flags=0x11 type=5 shelf=0
slot=0 adapter=0 port=67 cha
nnel=0
03:28:20: AAA/MEMORY: create_user (0x80D08748) user=''
ruser='' port='tty67' rem
_addr='129.1.32.193' authen_type=ASCII service=LOGIN
priv=1
03:28:28: AAA/MEMORY: free_user (0x80D08748)
user='vinod' ruser='' port='tty67'
rem_addr='129.1.32.193' authen_type=ASCII
service=LOGIN priv=1
03:28:28: AAA: parse name=tty67 idb type=-1 tty=-1
03:28:28: AAA: name=tty67 flags=0x11 type=5 shelf=0
slot=0 adapter=0 port=67 cha
nnel=0
03:28:28: AAA/MEMORY: create_user (0x80D08748) user=''
ruser='' port='tty67' rem
_addr='129.1.32.193' authen_type=ASCII service=LOGIN
priv=1
________________________________________________________________________
Missed your favourite TV serial last night? Try the new, Yahoo! TV.
visit http://in.tv.yahoo.com
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=55348&t=55348
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
