topic TACACS Authentication issue in Network Access Control

TACACS Authentication issue

Erland Medrano — Tue, 26 Mar 2019 00:35:02 GMT

Hi Cisco,

Good day!

Need your help on my problem, the problem is that a switch that we are trying to integrate to ACS can't authenticate via TACACS. based on our testing and troubleshooting, the ACS before config is Single connect device and TACACS+ Draft Compliant Single Connect Support is chosen. but when trying to change the configuration to Legacy TACACS + Single Connect support it works fine.

Question: what is the standard procedure for enrollment 1 or 2 (See below) ? what is the different?

1. Single connect Device and TACACAS + Draft Compliant Single Connect Support

2. Just Legacy TACACS + Single Connect Support

Hi Erland,

karans — Thu, 11 Aug 2016 14:09:30 GMT

Hi Erland,

The difference between Single connect Device and TACACAS + Draft Compliant Single Connect Support OR Legacy TACACS + Single Connect Support is former will send single connect flag to the NAS and latter will not send the single connect flag to NAS device.

You can also refer this draft for better understanding,

http://tools.ietf.org/html/draft-grant-tacacs-02

thanks for verification

Erland Medrano — Wed, 24 Aug 2016 09:23:26 GMT

thanks for verification

Re: Hi Erland,

kevink707 — Fri, 18 May 2018 20:34:37 GMT

Any recommended best practices for this setting?