Cisco AAA/Identity/Nac :: Compatible Nexus 5020 5.0.2.N2.1 With Tac Plus?

Sep 10, 2012

I have a problem with the switches Nexus, is impossible authenticate from tac_plus. In other company, I configured ACS for authenticate the Nexus Switches and OK The configuration of my tac_plus is:
 
user = gian {
login = cleartext prueba
member = nexus
group = nexus {
default service = permit
service = shell {
#double-quote-values = yes
#shell:roles=""network-admin""
cisco-av-pair*shell:roles="network-admin"
   
The configuration of switch is:
 
tacacs-server host xx.xx.xx.xx key 7 "xxxxx"aaa group server tacacs+ AAA_TACACS_SERVER    server xx.xx.xx.xx    source-interface mgmt0
aaa authentication login default group AAA_TACACS_SERVERaaa authorization commands default group AAA_TACACS_SERVER localaaa accounting default group AAA_TACACS_SERVER

View 4 Replies


ADVERTISEMENT

Cisco Switching/Routing :: Packet Discard On Nexus 5020 Link To Nexus 5K

Feb 23, 2011

We are facing issue of continous packet discards On nexus4001L link (int po2) to Nexus5020 switch. Nexus4001L is installed in IBM blade center server and we have FCOE enabled in this setup. [code]

View 2 Replies View Related

Cisco WAN :: -02 Will Not Work In Nexus 5020

Mar 22, 2010

I have two different model's of GLC-T SFP's.  One is PN 30-1410-02 the other is PN 30-1410-03. The -02 will not work in Nexus 5020 or an ASR-1000 router that I have, but works fine in my Cisco Wireless Controller.  The -03 works fine in any device. My problem is when ordering, you can not specify the -03  they get ordered as GLC-T and none of my suppliers can assure me that I would get the -03.What is the difference between these two?

View 8 Replies View Related

Cisco Switching/Routing :: Nexus 5020 And GLC-T Compatibility

May 27, 2012

The below nexus 5020 nx-os version and type/revision of my GLC-T is compatible with each other? I noticed also the "Transceiver calibration is invalid"  when i do show int e1/8 transceiver details , what does it mean?

View 8 Replies View Related

Cisco WAN :: Hardware Command To Verify Nexus 5020

Apr 23, 2013

What is the correct command to check the hardware of a Nexus 5020, like the show Inventori, show diag etc Used the same or is there a specific one for these items?

View 2 Replies View Related

Cisco Switching/Routing :: Nexus 5020 - Fan Chassis Failed

Oct 24, 2011

I have an alert from monitoring system about: “ fan for this system is not in the NORMAL state”. In the switch I found that the problem is with fex 3, see below:
 
Nexus5020# sh env fex 3 fan
Fan Fex: 3:
------------------------------------------------------
Fan             Model               Hw         Status
------------------------------------------------------
Chassis     N2K-C2148-FAN       --         failure
PS-1           N2K-PAC-200W         --         OK
PS-2           N2K-PAC-200W         --         OK
 
 Technician said: fans appear to be operational, BUT the only thing that appears abnormal is STAT light is amber (not sure what it means).

Also, if I compare the temperature from module 3 with module 2 (which doesn’t have an alert) is almost the same, this is why I think the fan is working fine, since module 3 is not hotter that module 2.

What I can do to reset this fan (chassis)? 

View 2 Replies View Related

Cisco :: LMS 4.0.1 / Nexus 5020 - Internal Error In Inventory Collection

Oct 10, 2011

2 Nexus 5020 (SysObjId 3.719) brings internal error in inventory collection as following:"RICS0001: Internal Error, unable to process the collected data from the device".whereby 2 other devices from same type, same sysobjid are working well. SDT from v401 shows this device as supported.

View 10 Replies View Related

Cisco Switching/Routing :: 5020 / LACP Between Nexus 5K (VPC) And HP Servers?

Jan 22, 2012

I have two N5K (5020) switches with NX-OS - 5.0(3)N2(1). These two switches form VPC domain: peer-link = 2*10Gb ports (1/17-18) and peer-keepalive link over managements ports.Also I have two HP servers with two 10 Gb ports on each server.Each server conected by one link to each N5K switch (1/9-10). N5K downlinks configured as access ports with LACP Active mode.There is only one VLAN (1).When "no shut" command entered on N5K access ports - ports going in "not connected" status, begin flap and then going in "linkFlapErrDisabled" state.In attach - "sh run" from N5K.

View 1 Replies View Related

Cisco Switching/Routing :: VPC Configuration Between Nexus 5020 And 5596UP

May 6, 2013

We have two Nexus switches in our network, one of them is Nexus5020 other Nexus5596UP. System image is identical on both switches 5.2(1)N1(4). When we try to setup VPC between these switches we see that all configured vlans on VPC peer link  between Nexus switches are blocked by spanning tree protocol with message "Bridge Assurance Inconsistent, VPC Peer-link Inconsistent". We still can't solve this problem.

Topology:
 
NEXUS_5020---Peer_link(Po2)---NEXUS_5596UP
 
                                                      /
 
                                                    /
 
Member_link (Po100)     Member_link (Po100)                      
 
                                                 /
 
                                               /  
 
                                SERVER

Configuration:
 
NEXUS_5020:
speed 1000
interface Vlan2000
no shutdown
description VPC_keepalive_link
vrf member VPC_kepalive
ip address 10.55.55.2/30

View 2 Replies View Related

Cisco Switching/Routing :: VPC Peer-link Between Nexus 5010 And 5020

Aug 7, 2012

I'm trying to create a vpc between a Nexus 5010 and Nexus 5020 switch. I recently upgraded the software so they are running the same version. I connect get a vpc link. Is there something wrong with my setup? Is a vpc between a 5010 and 5020 even possible? They are connected using a pair of Intel X520's in 802.3AD teaming mode. [code]

View 2 Replies View Related

Cisco Switching/Routing :: Spanning Tree Between A Nexus 5020 And Catalyst 6509

May 29, 2012

Our customer is willing to have a Cisco Nexus 5020 to provide server connectivity and this Nexus would go connected to their core switch 6509. They are concern about Spanning tree compatibility between the Nexus and the 6509. Are they fully compatible for Spanning tree?

View 3 Replies View Related

Cisco Switching/Routing :: Nexus 5020 Support Of HP Passive Twinax Cable?

Mar 3, 2013

I have a customer who is having some issues with 5m passive HP twinax cables, 537965-001, with a Chelsio 10G NIC.  Aside from NIC driver issue, if NX-OS recognizes this SFP+, should it be expected to work in a 5020 running 4.2(1)N1(1)? Whether Cisco has certified passive HP twinax cables?  I have included output to 'transceiver details' to a Cisco twinax and the HP (WL GORE) cables. 
 
Nexus5020# show interface eth 1/7 transceiver details
Ethernet1/7
sfp is present
name is CISCO-MOLEX    
type is SFP-H10GB-CU3M

[code]....

View 2 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.2 AAA Role Based In Nexus 5.1

Feb 7, 2011

I am using ACS 5.2 and attempting to authorize users through TACACS to Nexus 5.1 code.  I seem to have ACS setup correctly based on documentation I received through here.  The problem is that the NX/OS doesnt seem to be operating as expected. 

View 2 Replies View Related

Cisco AAA/Identity/Nac :: Adding Nexus 5596 To ACS V4.2?

Jan 28, 2013

Does ACS v4.2 support the addition of the Nexus switches?  We have a few new Nexus devices that have been added to ACS, but cannot be accessed successfully.  A msg re: role based authentication is received.  Do I have to do something special in ACS to support this?
 
Nexus 5596 v5.1(3)N2(1)

View 4 Replies View Related

Cisco AAA / Identity / Nac :: Nexus 7009 - Integration Of ACS With RSA

May 29, 2012

We have Nexus7009 at client network but due to limitation of Nexus switches that they can not be directly integrate Nexus with RSA so client has purchased cisco ACS for the AAA. We are able to do the authentication and authorization via ACS.However clients wants to further integrate the ACS with RSA so that authentication should happen via RSA and authorization should happen ACS. Is that possible ? if yes, how can i configure the ACS ?

View 5 Replies View Related

Cisco AAA/Identity/Nac :: Radius Authentication With ISE And Nexus 7000

Mar 24, 2013

i am trying to assign a right role for a user who authenticates to nexus 7k switch via radius. i am using cisco ISE version 1.1.1.268 and the nexus version is    5.0.2,I have created a role on nexus.

View 1 Replies View Related

Cisco AAA/Identity/Nac :: Nexus 7009 Using Radius Authentication?

Mar 13, 2012

I have setup my radius server access on the Nexus but am unable to authenticate through putty. If I do a radius-server test on the Nexus it says I authenticate. Here is the log I am getting.
 
 2012 Mar 14 16:03:21 switch-a %AUTHPRIV-4-SYSTEM_MSG: pam_unix(aaa:auth): check
pass; user unknown - aaad

[Code].....

View 1 Replies View Related

Cisco AAA/Identity/Nac :: TACACS Nexus 5548 Authorization?

Jan 3, 2012

I am having an issue with authorization on the Nexus 5548. Note: The tacacs configuration has and still works correctly with all non-Nexus gear.
 
Authentication succeeds, and initiatial authorization passes. However, all sh and config commands fail, though AAA Autho Config-Commands .... and Commands Default Group <Grp Name), are configured.
 
ACS generates the following error: 13025 Command failed to match a Permit rule. The Selected Command Set is DenyAllCommands. I created an AllowAll, but am unclear how to associate this with Access Policy.

View 1 Replies View Related

AAA/Identity/Nac :: Log File Size On ACS 5.3 With Nexus 1000v

Sep 13, 2012

how do i set limit on the log file size in ACS 5.3. I had the same issue with Nexus 1000v but there is a command that enables you to set log file nane and size. it is getting bulky.

View 7 Replies View Related

Cisco AAA/Identity/Nac :: ACS 4.2 Tacacs Custom Attribute For Nexus 1000V

Jul 18, 2011

how to add tacacs custom attribute to ACS 4.2 for Nexus 1000V:shell:roles="network-admin admin-vdc"In the interface configuration I've added new service, service - shell, protocol - tacacs+.In the group settings I've enabled this attribute configuration. And it is not works. Default privilege level is assigned to any user with access allowed.

View 8 Replies View Related

Cisco AAA/Identity/Nac :: MDS 9216i Switch - Nexus 4.27d And RSA Radius Server

Apr 13, 2011

I can authenticate between our MDS 9216i switch and RSA radius server but my role does not come across. The logged in user is a network-operator not admin. In the AV Pair i have defined shell:role*network-admin but it doesnt seem to come across

View 4 Replies View Related

Cisco AAA/Identity/Nac :: Setup Tacacs Config Onto New NEXUS 5000

May 26, 2011

I m trying to setup a Tacacs config onto my new NEXUS 5000 series.Nevertheless the authentication doesn't work.Actually I followed the config guide but something is not working or missing.I have setup everything through VMWARE with ACS installed on a Windows server.

View 20 Replies View Related

AAA/Identity/Nac :: Nexus 7000 Crashes Using Tacacs To ACS 4.1 Server

Apr 9, 2012

I see there is a similar post for Nexus 5000 to ACS 5.2.  Identical symptoms.  The supervisor crashed and switched to secondary.  Is there a comparable field for ACS 4.1 that needs to have something in it? 2012 Apr  9 11:07:55 va-core02 %$ VDC-1 %$ %SYSMGR-2-SERVICE_CRASHED: Service "Tacacs Daemon" (PID 9390) hasn't caught signal 11 (core will be saved). 2012 Apr  9 11:07:55 va-core02 %$ VDC-1 %$ %SYSMGR SYSMGR_AUTOCOLLECT_TECH_SUPPORT_LOG: This supervisor will temporarily remain online in order to collect show tech-support. This behavior is configurable via 'system [no] auto-collect tech-support'.

View 2 Replies View Related

Cisco AAA/Identity/Nac :: Nexus 5010 Allows TACACS And Local Authentication Concurrently

Jun 6, 2011

I am experiencing an issue where NX-OS on our 5010s is allowing both Local AND TACACS authentication concurrently.  If I don't configure any aaa authorization commands, the locally logged in user has unmitigated access to the device.  Once I enable aaa authroization, all commands issued by the locally logged in user are denied by ACS, but they can still log in to the device.  When I comb through the logs on the ACS server, I see successful logins when TACACS credentials are used, and also the failed attempts when the locally configured credentials are used.  On the switch, however, I receive "%TACACS-3-TACACS_ERROR_MESSAGE:  All servers failed to respond" when using locally configured credentials on the switch itself.  We are running ACS v4.2.

View 6 Replies View Related

Cisco Switching/Routing :: 5020 - Slow Throughput Between Two VLANs

Feb 14, 2012

When transferring traffic between two VLANs my throughput rate seems to drop to about 1.5 - 3.0 megabits / second.
 
My setup is like this...
 
Two Nexus 5020 switches. (switch01 and switch02)
Two Nexus 2232PP fabric extender switches. (switch03 and switch04)
Two Dell R815s with Chelsio and Intel NICs. (host1 and host2)
 
The servers run Xenserver 6.0, but as part of testing with this I've tried installing RedHat 6.2, VMware ESX 5.0 (vsphere 5).
 
The issue occurs when using trunking and transferring data from one VLAN to another. Example...
 
VM1 is in VLAN401 with an IP address of 10.100.40.40. The VM is on Host1. VM2 is in VLAN402 with an IP address of 10.100.50.50. The VM is on Host2.
 
I've been using a network throughput tool called iPerf to test and I find that I can only get a throughput rate of about 3.0megabits.
 
If I switch VM2 to be in VLAN401 with an IP address of 10.100.40.41 I get a throughput rate of about 6.7gigabits/sec.
 
In the above scenario, I'm using a Layer3 interface on the Nexus 5020, but in production we use a Vyatta virtual firewall.
 
I worked with Citrix for about 3 months and that was a dead end.

View 1 Replies View Related

Cisco AAA/Identity/Nac :: Nexus 5K With Free-Radius Assigning Network-operator Role

Apr 26, 2011

my customer has FreeRadius, and I'm trying to get the server to assign a network admin role to a 5K running 5.0.3 code.This is based on the example given in this document: url...The server authenticates the user name, but will only put the user into the network operator role. This is confirmed by checking the output of show user-account and debug security user-db.The Radius test using the same credentials passes the authentication test. I'm sure the problem is that the N5K dosent understand the VSA format of the attribute, and that this is a simple syntax problem.

View 2 Replies View Related

Cisco AAA/Identity/Nac :: Nexus 7K Is Mandatory To Implement SGACLs Within Trust-Sec Infrastructure Deployment

Jan 11, 2012

I am wondering if having a Nexus 7K is mandatory to implement SGACLs within a TrustSec Infrastructure deployment or having a Nexus 5500 could be enough?

View 1 Replies View Related

Cisco Switching/Routing :: Nexus 7000 With Fabric Extenders Nexus 2000?

Mar 15, 2013

I have been tasked to replace the existing Cat 6500 and 3750 switches by Nexus 7000 and Nexus 2000.I was told initially my boss plans to get 2 x Nexus 7000 and then eventually blow up to 4 x Nexus 7000s.For Nexus, is there a list of tasks / points that i need to consider for building the initial design?
 
Can i just link the Nexus 7000 like the following?
 
N7k-A    =========   N7k-B
|                                   |           
lots of N2ks               lots of N2ks

View 12 Replies View Related

Cisco Switching/Routing :: Nexus FEX Transceivers SNMP MIB Nexus 5000

Dec 22, 2011

Struggle to find the SNMP MIBS of the Nexus 5000 FEX tranceivers.

View 3 Replies View Related

Cisco Switching/Routing :: Datacenter Design With 2 Nexus 5K And 4 Nexus 2K?

Nov 13, 2012

we are planning a Nexus datacenter project with this layout:Our experiences with Nexus switches are not so large until now and the manuals are very extensive.Both N5K´s should be connected directly with all 4 N2K switches. I did not find a layout like this in the manuals. Only a design,where only 2 N2K are connected to one N5K, with this fex config:Now I´m not sure if it is right to make a config like this with the same slots and fex´s or with different slots and fex´s.

View 1 Replies View Related

Cisco WAN :: Compatible IOS In 881?

Jan 22, 2013

I have a Cisco Router 881 with c880data-universalk9-mz.150-1.M7.bin IOS file. I want to upgrade to the latest IOS c880data-universalk9-mz.152-4.M2.bin. But when I upload the file, it appears the message The selected file c880data-universalk9-mz.152-4.M2.bin is not compatible with this router model.

View 4 Replies View Related

Cisco :: ACS 3.3 And WLC 5508 Compatible?

Aug 21, 2011

I have a customer with an ACS for Windows version 3.3. I know the ACS is End-of-support, but if I could do Authentication for a WLAN with a Controller 5508 Softwareversion 7.0.116.0 and how?

View 3 Replies View Related

Compatible LAN Driver For M2N-MX SE PLUS?

Aug 9, 2011

compatible LAN driver for M2N-MX SE PLUS

View 4 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved