topic Re: Changing Password Prompt on Nexus via TACACS in Network Access Control

Changing Password Prompt on Nexus via TACACS

paul — Fri, 14 Sep 2018 15:34:39 GMT

I always change the password prompt in ISE for TACACS to "AD Password:" to signal to the network admin that TACACS is working. Older IOS versions don't respect the password prompt change and neither do Nexus switches. Has anyone gotten password prompt change via TACACS to work on Nexus?

Re: Changing Password Prompt on Nexus via TACACS

hslai — Sun, 21 Oct 2018 23:15:55 GMT

It's not working for me, either. With CSR1Kv (running IOS-XE 03.17.03.S), I see the prompt change only with Telnet but not SSH. In addition, I am unable to find any support for the feature "message banners for AAA authentication" on my test network devices.

Re: Changing Password Prompt on Nexus via TACACS

hslai — Fri, 26 Oct 2018 02:11:18 GMT

tomz.pl - Cisco AAA (TACACS) configuration on: IOS/NXOS/XR shows that the two configuration commands are IOS only:

aaa authentication password-prompt "LOCAL Password: "
aaa authentication username-prompt "LOCAL Username: "

And, Identifying TACACS+ failure « ipSpace.net blog clarifies that

... SSH does not pass authentication prompts between the server and the client (all prompting is done locally in the client)....