Troubleshooting Security Issues; Roles - Cisco N5K-M1600 - Expansion Module - 6 Ports Troubleshooting Manual

S e n d d o c u m e n t c o m m e n t s t o n e x u s 5 k - d o c f e e d b a c k @ c i s c o . c o m .

Troubleshooting Security Issues

The Cisco Nexus 5000 NX-OS provides security that protects your network from degradation or failure
and from data loss or compromise resulting from intentional attacks or from unintended, damaging
mistakes.
This chapter describes how to identify and resolve problems that can occur with security in the Cisco
Nexus 5000 Series switch.
This chapter includes the following sections:
•
•

Roles

Role assignment fails when user logs in
From the perspective of RBAC, when a user logs in, role assignment fails.
Possible Cause
The AV-pair is not configured properly on TACAC+ or the RADIUS server.
Solution
To complete the role assignment follow these steps:
Check the TACACS+ (for example, ACS) server configuration.
Step 1
•
•
OL-25300-01
Roles
AAA
Use the following menu path to access the settings:
Interface Configuration > TACACS+ (Cisco IOS)
Select the User box for Shell (exec)
–
– Select the Advanced TACACS+ Features
Display a window for each service that was selected, where you can enter customized TACACS+
attributes in the Advanced Configuration Options.
Use the following menu path to access the settings and add a string to the Shell attributes:
User Setup > Add/Edit "admin" > TACACS+ Settings
– Select the Shell and Custom attributes boxes
6
C H A P T E R
Cisco Nexus 5000 Series Troubleshooting Guide
6-1