Troubleshooting Guide

current user, which determines the user access privileges. The switch supports access
levels 1 to 6 and access level 15.
The following table maps user accounts to TACACS+ privilege level.
Switch access level TACACS+ privilege level Description
NONE 0 If the TACACS+ server returns
an access level of 0, the user is
denied access. You cannot log
into the device if you have an
access level of 0.
READ ONLY 1 Permits you to view only
configuration and status
information.
LAYER 1 READ WRITE 2 Permits you to view most of the
switch configuration and status
information and change
physical port settings.
LAYER 2 READ WRITE 3 Permits you to view and change
configuration and status
information for Layer 2 (bridging
and switching) functions.
LAYER 3 READ WRITE 4 Permits you to view and change
configuration and status
information for Layer 2 and
Layer 3 (routing) functions.
READ WRITE 5 Permits you to view and change
configuration and status
information across the switch.
This level does not allow you to
change security and password
settings.
READ WRITE ALL 6 Permits you to have all the
rights of read-write access and
the ability to change security
settings, including Avaya
command line interface (ACLI)
and web-based management
user names and passwords,
and the SNMP community
strings.
NONE 7 to 14 If the TACACS+ server returns
an access level of 7 to 14, the
user is denied access. You
cannot log into the device if you
have an access level of 7 to 14.
Table continues…
Troubleshooting TACACS+
January 2017 Troubleshooting 237
Comments on this document? [e-mail]