This user does not have permissions for this command.

[Giuseppe_Montan]

Good Afternoon,

X440 connected to XMC/NAC used to autheticate the user for management login.

IF I try to connect to the switch with ssh the prompt is this :

X440_UP > and for any command I do I receive this error:

"This user does not have permissions for this command."

The problem is the connection to radius ( XMC/NAC ) but I do not know where ( I only upgraded to the last release XMC and NAC )

Thanks
Giuseppe

[Zdeněk_Pala]

you can execute this command:
tcpdump -ni eth0 port 1812 -w /tmp/mypcap.pcap

then you can download the pcap file.
other option is to use GUI of the NAC engine and start the packet capture there
---
regarding your screenshots:

- is your user part of the user group condition
- is your switch part of the location condition

[Giuseppe_Montan]

Hi, on NAC and XMC I have only tcpdump, is possible to install tshark ?

Giuseppe

[Zdeněk_Pala]

still missing the NAC rule that should match.
Can you share PCAP of the radius access accept?

[Giuseppe_Montan]

XMC Configuration and Switch configuration

Giuseppe

[Zdeněk_Pala]

The AAA rule looks ok
The policy mapping looks ok.

what about the rest of the config? I shared NAC rules, NAC profile, Switch config