topic Re: Configuring SG350 with TACACS in Network Access Control

Configuring SG350 with TACACS

syed.saaud — Wed, 25 Dec 2019 07:26:36 GMT

Need assistance for confiuring SG350 switches for TACACS.

I have used the below URL for configuring ACS on my SG350 switch.

Port TCP/49 is allowed from my switch to the TACACS server.

But still the status not connected on my switch when i run the command "show tacacs".

https://www.cisco.com/c/en/us/support/docs/smb/switches/cisco-small-business-300-series-managed-switches/smb1470-tacacs-server-configuration-on-the-300-series-managed-switc.html

Re: Configuring SG350 with TACACS

balaji.bandi — Wed, 25 Dec 2019 11:06:51 GMT

how is your ACS key configured? Encrypted?

Try plain text with key for testing? also check the Logs both the side, Switch side and ACS side ?

Re: Configuring SG350 with TACACS

syed.saaud — Thu, 26 Dec 2019 12:58:48 GMT

Hi,

Got this working...

Updated my config as below

aaa authentication login authorization SSH tacacs local
aaa authentication enable authorization SSH tacacs enable
aaa authentication enable default tacacs enable
aaa accounting login start-stop group tacacs+

line ssh
login authentication SSH
enable authentication SSH

enable password ***********

Thanks,

Syed Saaud