Solved

How do I set up a TACACS connection to my CSS 11503?

Posted on 2008-06-12
1
875 Views
Last Modified: 2010-08-05
I'm working on getting a CSS 11503 to authenticate admin logins through my ACS server running TACACS+. I have added the server and tried various different settings for the frequency and timeouts. When I do a "show TACACS" command it always shows the server as "DEAD" under the state, but I can ping the ACS server from the CSS.

I have also tried different configs with and with out the virtual authentication primary tacacs. I believe that command is for Telnet, but I tried it anyway still with no luck.  

I suppose its possible there is something special that needs to be done on the ACS server for the CSS. Currently I'm using the same settings that I've been using for all my other network devices and have had no problems with them.

Any ideas?
CSS11503(config)# sh taca

Per-Server Status:
 

 IP/Port              State   Primary        Authen.      Author.      Account

 -------              -----   -------        -------      -------       ------

 10.1.9.35:49         Dead    Yes                  0            0            0

 Totals:                                           0            0            0
 

Per-Server Configuration:
 

 IP/Port              Key              Server Timeout        Server Frequency

 -------              ---              --------------        ----------------

 10.1.9.35:49         Configured       60                    None            
 

Global Configuration Parameters:
 

 Global Timeout:                30  

 Global KAL Frequency:          5  

 Global Key:                    Configured  

 Authorize Config Commands:     No

 Authorize Non-Config Commands: No

 Account Config Commands:       No

 Account Non-Config Commands:   No

 Send Full Command:             Yes

Open in new window

0
Comment
Question by:Eyedied
1 Comment
 
LVL 32

Accepted Solution

by:
harbor235 earned 125 total points
ID: 21813053

You did not include your config so this is hard to troubleshoot, however, here is a good doc;

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v7.40/configuration/security/guide/tacacs.html

harbor235 ;}
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Cisco 1830 AP behaving wierdly 7 64
Server Room Hardware 5 90
assessment of laptops/desktops for hardware refresh 6 47
switch design question 6 16
Before I go to far, let's explain HA (High Availability) and why you should consider it.  High availability is the mechanism used to provide redundancy to any service at the same site and appears as a single service to the users of that service.  As…
The use of stolen credentials is a hot commodity this year allowing threat actors to move laterally within the network in order to avoid breach detection.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now