Solved

How do I set up a TACACS connection to my CSS 11503?

Posted on 2008-06-12
1
869 Views
Last Modified: 2010-08-05
I'm working on getting a CSS 11503 to authenticate admin logins through my ACS server running TACACS+. I have added the server and tried various different settings for the frequency and timeouts. When I do a "show TACACS" command it always shows the server as "DEAD" under the state, but I can ping the ACS server from the CSS.

I have also tried different configs with and with out the virtual authentication primary tacacs. I believe that command is for Telnet, but I tried it anyway still with no luck.  

I suppose its possible there is something special that needs to be done on the ACS server for the CSS. Currently I'm using the same settings that I've been using for all my other network devices and have had no problems with them.

Any ideas?
CSS11503(config)# sh taca

Per-Server Status:
 

 IP/Port              State   Primary        Authen.      Author.      Account

 -------              -----   -------        -------      -------       ------

 10.1.9.35:49         Dead    Yes                  0            0            0

 Totals:                                           0            0            0
 

Per-Server Configuration:
 

 IP/Port              Key              Server Timeout        Server Frequency

 -------              ---              --------------        ----------------

 10.1.9.35:49         Configured       60                    None            
 

Global Configuration Parameters:
 

 Global Timeout:                30  

 Global KAL Frequency:          5  

 Global Key:                    Configured  

 Authorize Config Commands:     No

 Authorize Non-Config Commands: No

 Account Config Commands:       No

 Account Non-Config Commands:   No

 Send Full Command:             Yes

Open in new window

0
Comment
Question by:Eyedied
1 Comment
 
LVL 32

Accepted Solution

by:
harbor235 earned 125 total points
Comment Utility

You did not include your config so this is hard to troubleshoot, however, here is a good doc;

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v7.40/configuration/security/guide/tacacs.html

harbor235 ;}
0

Featured Post

Network it in WD Red

There's an industry-leading WD Red drive for every compatible NAS system to help fulfill your data storage needs. With drives up to 8TB, WD Red offers a wide array of solutions for customers looking to build the biggest, best-performing NAS storage solution.  

Join & Write a Comment

Every server (virtual or physical) needs a console: and the console can be provided through hardware directly connected, software for remote connections, local connections, through a KVM, etc. This document explains the different types of consol…
The use of stolen credentials is a hot commodity this year allowing threat actors to move laterally within the network in order to avoid breach detection.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now