Solved

How do I set up a TACACS connection to my CSS 11503?

Posted on 2008-06-12
1
889 Views
Last Modified: 2010-08-05
I'm working on getting a CSS 11503 to authenticate admin logins through my ACS server running TACACS+. I have added the server and tried various different settings for the frequency and timeouts. When I do a "show TACACS" command it always shows the server as "DEAD" under the state, but I can ping the ACS server from the CSS.

I have also tried different configs with and with out the virtual authentication primary tacacs. I believe that command is for Telnet, but I tried it anyway still with no luck.  

I suppose its possible there is something special that needs to be done on the ACS server for the CSS. Currently I'm using the same settings that I've been using for all my other network devices and have had no problems with them.

Any ideas?
CSS11503(config)# sh taca
Per-Server Status:
 
 IP/Port              State   Primary        Authen.      Author.      Account
 -------              -----   -------        -------      -------       ------
 10.1.9.35:49         Dead    Yes                  0            0            0
 Totals:                                           0            0            0
 
Per-Server Configuration:
 
 IP/Port              Key              Server Timeout        Server Frequency
 -------              ---              --------------        ----------------
 10.1.9.35:49         Configured       60                    None            
 
Global Configuration Parameters:
 
 Global Timeout:                30  
 Global KAL Frequency:          5  
 Global Key:                    Configured  
 Authorize Config Commands:     No
 Authorize Non-Config Commands: No
 Account Config Commands:       No
 Account Non-Config Commands:   No
 Send Full Command:             Yes

Open in new window

0
Comment
Question by:Eyedied
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 32

Accepted Solution

by:
harbor235 earned 125 total points
ID: 21813053

You did not include your config so this is hard to troubleshoot, however, here is a good doc;

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v7.40/configuration/security/guide/tacacs.html

harbor235 ;}
0

Featured Post

Defend Your Organization from The Greatest Threats

Looking to fill the gaps in your security? Bring together information from the network, endpoint and threat intelligence feeds to really see what's happening in your organization. Join the WatchGuardians in their adventures fighting cyber crime!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Netgear modem router default firmware 11 63
Cisco 4400 will not take SFP module ? SFP 10 GB module 1 89
ASA NAT rule change 3 86
Problem to VirtualBox Internet connection 1 54
Outsource Your Fax Infrastructure to the Cloud (And come out looking like an IT Hero!) Relative to the many demands on today’s IT teams, spending capital, time and resources to maintain physical fax servers and infrastructure is not a high priority.
David Varnum recently wrote up his impressions of PRTG, based on a presentation by my colleague Christian at Tech Field Day at VMworld in Barcelona. Thanks David, for your detailed and honest evaluation!
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question