topic TACACS source interface in Network Access Control

TACACS source interface

nawas — Tue, 26 Mar 2019 00:23:32 GMT

I'm trying to force my router to use loopback0 or 1 interface to authenticate to TACACS server and I enter the command

ip tacacs source-interface loopback0 and it still used one of the vlan in the router and strange this when I do show run I don't even see this command configured on the router, is there someting I'm missing. It is Cisco6509 with MSFC and IOS code 12.1(22)E2.

Thanks.

Re: TACACS source interface

ethiel — Wed, 18 Oct 2006 03:27:44 GMT

Well, the only thing I can think of is you might be hitting a bug. There is definitely a loopback0 interface configured on your router? I use that command exactly as you have it without issue, and it always shows up in the config.

In ACS in reports->failed authentication logs does it show up with an "unknown nas" error with the vlan IP?

-Eric