TACACS config & Testing on Cisco Devices using Python

AliHyder — Wed, 16 Oct 2019 14:26:47 GMT

I have an script to send the TACACS config using Netmiko for nearly 1000 devices, but how should we test it before we exit out of session if any thing goes wrong. This is part of ACS migration TACACS_Plus library is not helping it this.

Re: TACACS config & Testing on Cisco Devices using Python

Seb Rupik — Wed, 16 Oct 2019 14:52:08 GMT

Hi there,

Create a service account (ie in the local user store on your TACACS server (ACS or ISE) ) and ensure it only has 'priv 1' access.

Have your script run the command:

test aaa group tacacs+ <service_acc_name> <service_acc_pass> new-code

...then regex the returned result for the string "User successfully authenticated"

cheers,

Seb.

topic TACACS config & Testing on Cisco Devices using Python in Tools

TACACS config & Testing on Cisco Devices using Python

Re: TACACS config & Testing on Cisco Devices using Python