topic Re: Cisco Firepower 2100 - Unable to configure TACACS on chassis in Network Security

Cisco Firepower 2100 - Unable to configure TACACS on chassis

julomban1 — Wed, 18 Aug 2021 16:25:13 GMT

Hello All,

I have a 2100 appliance running ASA image on it, I was able to point the ASA module to TACACS server for authentication however when I try the 2100 chassis itself, the AAA option is not available under platform settings (GUI).

I have another pair of 4100s and I can see the option and its working fine.

xxxxxxx# show system de

Systems:
Name: xxxxxxx
Mode: Stand Alone
System IP Address: x.x.x.x
System IPv6 Address: ::
System Owner:
System Site:
Description for System:
aur1inc5fp101# show system firmware
MANAGER:
Boot Loader:
Firmware-Vers: 1009.0200.0213
System:
Running-Vers: 2.4(1.265)
Platform-Vers: 2.4.1.265
Package-Vers: 9.10.1.42
NPU:
Running-Vers: 2.4(1.265)
Platform-Vers: 2.4.1.265
Package-Vers: 9.10.1.42
Service Manager:
Running-Vers: 2.4(1.265)
Platform-Vers: 2.4.1.265
Package-Vers: 9.10.1.42

xxxxxxx#

Any particular reason why I am not able to configure TACACS on the 2100s?

Re: Cisco Firepower 2100 - Unable to configure TACACS on chassis

Rob Ingram — Wed, 18 Aug 2021 16:35:55 GMT

Hi @julomban1

The 2100 series appliances do not have a full FXOS, and only supports a subset of the features when compared to the 4100/9300 hardware.

Re: Cisco Firepower 2100 - Unable to configure TACACS on chassis

julomban1 — Wed, 18 Aug 2021 16:38:35 GMT

Thanks Rob, so I can only use local authentication for the chassis?

Re: Cisco Firepower 2100 - Unable to configure TACACS on chassis

Rob Ingram — Wed, 18 Aug 2021 16:45:16 GMT

@julomban1

Yes, local authentication only

https://www.cisco.com/c/en/us/td/docs/security/asa/fxos/config/asa-2100-fxos-config/fcm.html#id_56701

Re: Cisco Firepower 2100 - Unable to configure TACACS on chassis

julomban1 — Wed, 18 Aug 2021 19:29:48 GMT

Thanks, Rob,

Do u know if there is an enhancement request to allow this in the future?