On Wed, Jul 30, 2014 at 8:39 AM, Sam Stickland <[email protected]> wrote:

> I'm really stumped. Why does it not talk to the TACACS server for
> exec/enable?
>

You will need to add something like:

  aaa authentication enable default group tacacs+ enable

You will also most likely want to add, at a minimum:

  aaa authorization config-commands
  aaa authorization commands 15 default group tacacs+ local
if-authenticated

AAA configuration is non-intuitive to say the least.
_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to