topic Re: VPN router AAA issue in Network Access Control

VPN router AAA issue

xzjleo2005 — Tue, 26 Mar 2019 00:26:30 GMT

We have a router-ASA internet VPN. ASA is on central site, router is on remote site. We have a ACS server at central site behind the ASA, now we need the remote router to do AAA with the ACS server when someone logon to it. I added the config on ACS and router, but the problem is remote site router can not reach the ACS server unless the source ip is LAN ip. Anyone know if we can set the source ip to LAN ip for AAA reqeust packet on the router?

Thanks. Leo

Re: VPN router AAA issue

Collin Clark — Fri, 02 Oct 2009 13:09:54 GMT

Leo-

ip tacacs source-interface FastEthernet0/0

Hope it helps.

Re: VPN router AAA issue

Jatin Katyal — Fri, 02 Oct 2009 13:20:29 GMT

Hi Leo,

Further to collin post...

yes that is possible.

on the router you need to use this command.

The ip tacacs source-interface configuration command allows you to specify a particular source IP address for TACACS.

And, On the ACS you need to add router with the same LAN IP address.

HTH

Re: VPN router AAA issue

xzjleo2005 — Fri, 02 Oct 2009 21:03:20 GMT

Cool, thanks guys. Will have try and see how it goes.

Leo