CCS 11506 Tacacs Source Interface.

[tonysong]

Hi,

We have 4 CSS 11506 and 2 Tacacs servers.

2 CSS with same ios version but behaves different. 1 talks to the ACS server via the management interface and the other talks with ACS server via the circuit interface. Are there any command like that on the Cisco routers to define the Tacacs source Interface?

Thanks!

Tony

[Gilles Dufour]

it depends on your routing table.

The CSS will select automatically the exit interface ip address as source.

There is no command to chose the interface.

Gilles.

[d-fillmore]

In the past, TACACS was not a routable protocol over the management interface.

Has this changed? Can we now route TACACS packets to and from the server over the management interface?

Cheers, Dom

[danmuril]

Tony,

The behavior you mention has not changed for TACACS.

[j.poley]

We typically use a loopback address for TACACS communication. Then any single failed interface will not interfere with communications back to TACACS.

Here is the command...

ip tacacs source-interface Loopback0

JDP