Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [authorization]

For questions about network authorization. For instance, you are setting up TACACS on your switch and need to configure the correct authorization levels for your users.

7
votes
1answer
7k views

How do you configure a TACACS+ tac_plus server on Ubuntu 16.04 that authenticates against Microsoft Active Directory?

How do you configure a TACACS+ tac_plus server on Ubuntu 16.04 that authenticates against Microsoft Active Directory?
1
vote
1answer
602 views

Lockout of console! Help required!

I'm locked out of the console after applying two AAA authorization statements aaa new-model aaa authorization console aaa authorization exec default group tacacs+ none Now my customer requires me ...
1
vote
1answer
494 views

Cisco Radius Authentication with Local Fallback

We have Radius authentication setup on a number of CISCO devices. Each device also has a local account. Is it possible to make it so you can only use the local account when the radius server is ...
1
vote
1answer
212 views

How does Tacacs server forward the credentials from client to Authentication server?

How does Tacacs server forward the credentials from client to Authentication server? Does a decryption and Encryption of creds takes place? Or is it just a packet forward ? Edit: The authentication ...
2
votes
3answers
685 views

Can I limit Cisco IOS login to specific users?

I have a Cisco IOS router that is used for WAN access. I have 2 additional users defined with less privilege to check status and to use ssh. I wonder if it is possible to restrict certain user to only ...
3
votes
1answer
16k views

% Authorization failed. message appear when I try to connect to the switch using local DB user name

I configured aaa using Tacacs+ on a switch and a router but when I try to connect to the switch through SSH it just accept Tacacs+ users when I try to use local DB user I got "% Authorization failed." ...
5
votes
1answer
4k views

AAA Authorization Timeout

Log into a Cisco IOS device with TACACS Authorization enabled Do a command that causes the device to lose access to the TACACS server Enter a command that requires TACACS Authorization By default, ...
2
votes
0answers
1k views

AAA - IP HTTP server: local authentication and authorization

We configure AAA on router for the Telnet/SSH access. We activate HTTP on our router to our provisioning tool. The provisioning tool needs to retrieve information and execute some command on the HTTP ...