topic Re: Router Source address for ACS Server in Network Access Control

Router Source address for ACS Server

cpopour — Sun, 10 Mar 2019 21:40:58 GMT

Does anyone know how to configure a router(MSFC in this case so the same ip address is sent to the ACS server for authenticating. The source address may not always be the same depending on the path taken, If the source address isnt an ip address configured for one of my devices the acs server rejects the attempt and the router defaults to local login. I tried settigng a loopback address and always telnetiing to the loopback address however the source address from the MSFC is not the loopback I have 38 vlans, snd i suppose i could configure thoe ip addresses under a device, however if iI add a vlan then I must remember to add that vlan to ACS. Im sure there is a simpler way to address this, I just cant seem to find the configs needed on the MSFC to make it work.

Any help will be greatly appreciated.

Thanks

Re: Router Source address for ACS Server

andrew.burns — Fri, 28 Jul 2006 09:13:30 GMT

Hi,

Sounds like you need:

ip tacacs source-interface interface-name

(or ip radius source-interface interface-name)

It's recommended to use a loopback interface, so this would give you (assuming loopback0):

ip tacacs source-interface loopback0

HTH - plz rate if it does

Andrew.

Re: Router Source address for ACS Server

cpopour — Fri, 28 Jul 2006 11:59:44 GMT

Thats exactly it. Thanks