topic CSS11501 - source port and IP address for logging & TACACS in Application Networking

CSS11501 - source port and IP address for logging & TACACS

mark.c.mowat — Thu, 22 Jan 2009 22:19:04 GMT

(1) What source IP address does a CSS (ver 7.5) use for (a) logging, (b) TACACS? Is it always the management port IP address? Can it be specified?

(2) What Eth port does a CSS (ver 7.5) use for (a) logging, (b) TACACS? Is it the management or a standard FE port. For TACACS it appears to be always the latter while the TACACS request still uses the IP address of the former? Is this correct? Can it be specified?

Re: CSS11501 - source port and IP address for logging & TACACS

Gilles Dufour — Fri, 23 Jan 2009 10:29:33 GMT

the source interface can't be specified.

The CSS will use the source interface based on the routing table.

It will take the ip of the exit interface to reach the TACACS server.

Re: CSS11501 - source port and IP address for logging & TACACS

michael.botha — Thu, 29 Jan 2009 06:34:45 GMT

In my experience this seems to be partially correct.

Syslog, snmp-trap and icmp seem to use the management source interface based on the routing table. More specific routes added via "ip management route" command.

The tacacs however seems to ignore these routes specified via "ip management route".