Solved

How do I set up a TACACS connection to my CSS 11503?

Posted on 2008-06-12
1
879 Views
Last Modified: 2010-08-05
I'm working on getting a CSS 11503 to authenticate admin logins through my ACS server running TACACS+. I have added the server and tried various different settings for the frequency and timeouts. When I do a "show TACACS" command it always shows the server as "DEAD" under the state, but I can ping the ACS server from the CSS.

I have also tried different configs with and with out the virtual authentication primary tacacs. I believe that command is for Telnet, but I tried it anyway still with no luck.  

I suppose its possible there is something special that needs to be done on the ACS server for the CSS. Currently I'm using the same settings that I've been using for all my other network devices and have had no problems with them.

Any ideas?
CSS11503(config)# sh taca
Per-Server Status:
 
 IP/Port              State   Primary        Authen.      Author.      Account
 -------              -----   -------        -------      -------       ------
 10.1.9.35:49         Dead    Yes                  0            0            0
 Totals:                                           0            0            0
 
Per-Server Configuration:
 
 IP/Port              Key              Server Timeout        Server Frequency
 -------              ---              --------------        ----------------
 10.1.9.35:49         Configured       60                    None            
 
Global Configuration Parameters:
 
 Global Timeout:                30  
 Global KAL Frequency:          5  
 Global Key:                    Configured  
 Authorize Config Commands:     No
 Authorize Non-Config Commands: No
 Account Config Commands:       No
 Account Non-Config Commands:   No
 Send Full Command:             Yes

Open in new window

0
Comment
Question by:Eyedied
1 Comment
 
LVL 32

Accepted Solution

by:
harbor235 earned 125 total points
ID: 21813053

You did not include your config so this is hard to troubleshoot, however, here is a good doc;

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v7.40/configuration/security/guide/tacacs.html

harbor235 ;}
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Setting up a VPN 60 140
CMDB relationships for hardware assets 2 74
Ping Through ASA Firewall 6 39
Network cabling explanation? Copper, twinaxial, SFP+, fiber? 4 48
This article is in response to a question (http://www.experts-exchange.com/Networking/Network_Management/Network_Analysis/Q_28230497.html) here at Experts Exchange. The Original Poster (OP) requires a utility that will accept a list of IP addresses …
Every server (virtual or physical) needs a console: and the console can be provided through hardware directly connected, software for remote connections, local connections, through a KVM, etc. This document explains the different types of consol…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question