Troubleshooting Your AAA Setup
Troubleshooting your AAA configuration can be a simple function or a difficult process,
depending on how complicated the configuration is and how well you documented it. It is
always in your best interest to document any configuration and to be as detailed as possible
when doing so. It is also recommended that you use best practices such as adding users to
groups and applying rules to groups rather than to users, using a standardized naming
convention, and completing the description fields and comment blocks when creating
elements, rules, components, and so on. Neglecting these basic steps can turn a relatively
simple issue into an extremely difficult troubleshooting event. It also is a good idea to
remember the basic troubleshooting method of “divide and conquer.” In other words, do not
start checking the Security Appliance or the Cisco Secure ACS configuration until you have
verified connectivity between the two devices.