Solved

How do I set up a TACACS connection to my CSS 11503?

Posted on 2008-06-12
1
894 Views
Last Modified: 2010-08-05
I'm working on getting a CSS 11503 to authenticate admin logins through my ACS server running TACACS+. I have added the server and tried various different settings for the frequency and timeouts. When I do a "show TACACS" command it always shows the server as "DEAD" under the state, but I can ping the ACS server from the CSS.

I have also tried different configs with and with out the virtual authentication primary tacacs. I believe that command is for Telnet, but I tried it anyway still with no luck.  

I suppose its possible there is something special that needs to be done on the ACS server for the CSS. Currently I'm using the same settings that I've been using for all my other network devices and have had no problems with them.

Any ideas?
CSS11503(config)# sh taca
Per-Server Status:
 
 IP/Port              State   Primary        Authen.      Author.      Account
 -------              -----   -------        -------      -------       ------
 10.1.9.35:49         Dead    Yes                  0            0            0
 Totals:                                           0            0            0
 
Per-Server Configuration:
 
 IP/Port              Key              Server Timeout        Server Frequency
 -------              ---              --------------        ----------------
 10.1.9.35:49         Configured       60                    None            
 
Global Configuration Parameters:
 
 Global Timeout:                30  
 Global KAL Frequency:          5  
 Global Key:                    Configured  
 Authorize Config Commands:     No
 Authorize Non-Config Commands: No
 Account Config Commands:       No
 Account Non-Config Commands:   No
 Send Full Command:             Yes

Open in new window

0
Comment
Question by:Eyedied
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 32

Accepted Solution

by:
harbor235 earned 125 total points
ID: 21813053

You did not include your config so this is hard to troubleshoot, however, here is a good doc;

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v7.40/configuration/security/guide/tacacs.html

harbor235 ;}
0

Featured Post

Optimum High-Definition Video Viewing and Control

The ATEN VM0404HA 4x4 4K HDMI Matrix Switch supports 4K resolutions of UHD (3840 x 2160) and DCI (4096 x 2160) with refresh rates of 30 Hz (4:4:4) and 60 Hz (4:2:0). It is ideal for applications where the routing of 4K digital signals is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So, you're experiencing issues on your network and you've decided that you need to perform some tests to determine whether your cabling is good.  You're likely thinking that you may need to spend money which you probably don't have on hiring/purchas…
#Citrix #Netscaler #MSSQL #Load Balance
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Suggested Courses

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question