[nsp] TACACS Authentication for telnet users

Oliver Boehmer (oboehmer) oboehmer at cisco.com
Mon Jul 19 06:25:44 EDT 2004


> Below is the config i did in profile
> user = xxxxx {
>        login = des 9Yu3082mqnBzw
>        service = exec {
>         priv_lvl=15
>         }
>     }

looks good.
 
> and on Router
> =============
> 
> aaa group server tacacs+ tacgrp
>  server x.x.x.x
> 
> aaa authentication login default local
> aaa authentication login login-auth-list group tacgrp local line
> aaa authorization exec login-auth-list group tacacs+ if-authenticated
> aaa accounting exec default start-stop group tacacs+
> aaa accounting commands 1 default start-stop group tacacs+
> aaa accounting commands 15 default start-stop group tacacs+

can you check your "line vty" configuration? I see that you're using a
non-default method ("login-auth-list"), so you also need to reference
this method on your vty's:

line vty 0 4
 authorization exec login-auth-list 

hope it helps

	oli



More information about the cisco-nsp mailing list