topic Re: TACACS+ Command set differences for IOS vs OS in Network Access Control

TACACS+ Command set differences for IOS vs OS

scottherres — Sun, 10 Mar 2019 20:47:09 GMT

How does the command set differ for configuring TACACS+ on an IOS device verses configuring on a Cat OS device?

Re: TACACS+ Command set differences for IOS vs OS

pvanvuuren — Mon, 06 Sep 2004 07:08:30 GMT

The difference is quite vast. Here is a sample:

IOS:

aaa new-model

aaa authentication login default group tacacs+ enable

aaa authorization exec default group tacacs+ if-authenticated

aaa authorization commands 15 default group tacacs+ if-authenticated

aaa accounting exec default start-stop group tacacs+

aaa accounting commands 15 default start-stop group tacacs+

ip tacacs source-interface Ethernet 0/0

tacacs-server host 10.1.10.35

tacacs-server key xyz1234

and now for CATOS:

#tacacs+

set tacacs server 10.1.1.35 primary

set tacacs key secret

#authentication

set authentication login tacacs enable console primary

set authentication login tacacs enable telnet primary

set authentication login tacacs enable http primary

set authentication enable tacacs enable console primary

set authentication enable tacacs enable telnet primary

set authentication enable tacacs enable http primary

I hope this helps.

Re: TACACS+ Command set differences for IOS vs OS

scottherres — Tue, 07 Sep 2004 14:12:13 GMT

Exellent information, thank you. I am continuing a more in depth search of the command syntax for different versions of IOS and Cat OS, Any information about how the command syntax varies in different verions of IOS and CatOS would be appreciated. Thank you.