topic Re: Try configuration has in Network Access Control

Configure 3850 AAA through Mgmt-vrf

hook huang — Mon, 11 Mar 2019 04:29:20 GMT

Hi Sirs:

I configured 3850 AAA command, but it could not connect to tacas server.

Do I confiure something worng?

=====================Tacas server status==================

Tacacs+ Server - public :

Server address: 10.0.0.1

Server port: 49

Socket opens: 279

Socket closes: 278

Socket aborts: 0

Socket errors: 0

Socket Timeouts: 0

Failed Connect Attempts: 0

Total Packets Sent: 0

        Total Packets Recv:          0 Tacacs+ Server - public :
            Server address: 10.10.99.3
               Server port: 49
              Socket opens:        279
             Socket closes:        278
             Socket aborts:          0
             Socket errors:          0
           Socket Timeouts:          0
   Failed Connect Attempts:          0
        Total Packets Sent:          0
        Total Packets Recv:          0

=========================AAA config===================

vrf definition Mgmt-vrf

aaa new-model
!
!
aaa authentication login default group tacacs+ line
aaa authentication login console none
aaa authorization console
aaa authorization exec default group tacacs+ if-authenticated
aaa authorization exec console none
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+

interface GigabitEthernet0/0
vrf forwarding Mgmt-vrf
ip address 192.168.1.1 255.255.255.0
negotiation auto

ip route vrf Mgmt-vrf 0.0.0.0 0.0.0.0 192.168.1.254
ip tacacs source-interface GigabitEthernet0/0

tacacs-server host 10.0.0.1
tacacs-server directed-request
tacacs-server key cisco123

no aaa new-model

rshu — Thu, 03 Apr 2014 07:27:54 GMT

no aaa new-model

Try configuration has

patelrasesh — Fri, 06 Jun 2014 00:57:47 GMT

Try configuration has under

aaa new-model
!
!
aaa group server tacacs+ ACS
server-private 10.0.0.1 timeout 3 key *****
server-private 10.0.0.2 timeout 3 key *****
ip vrf forwarding Mgmt-vrf
ip tacacs source-interface GigabitEthernet0/0
!
!
aaa authentication login default group ACS local
aaa authentication enable default group ACS enable
aaa authentication login console group ACS local
aaa authorization console
aaa authorization exec default group ACS
aaa accounting exec default start-stop group ACS
aaa accounting commands 0 default start-stop group ACS
aaa accounting commands 1 default start-stop group ACS
aaa accounting commands 15 default start-stop group ACS
aaa accounting connection default start-stop group ACS
aaa accounting system default start-stop group ACS
!
!
ip tacacs source-interface GigabitEthernet0/0
!

Re: Try configuration has

Marvin Rhoads — Mon, 20 Dec 2021 13:29:20 GMT

7 years later and still finding this useful tip. 🙂