Load Balancing TACACS Authentication Servers

[stakach]

I'm using a CSS1150 to Load Balance AAA servers, for login requests coming from users connecting to Access Servers. (RAS Users authentication).

I have the services configured as port 49.

How do I do health checking for this service?

Is the only way to write a script and put in a

user name and password?

[Gilles Dufour]

you can check a service at different level.

- response to ping

- open a tcp connection and close it

- submit a true request

The first 2 options can easily be done with existing keepalive functions, but the last one requires a script.

If you go for the script, what you can do is sniff a request going to your tacacs server and save the hexadecimal info. You can then type this hexadecimal part in your script and replay it using the 'raw' keyword.

Regards,

Gilles.