Hello,
We are trying to setup AAA for the management of a new customer Catalyst Center.
This customer runs a TACACS pro bono server, and we will not be migrating them to ISE yet (even though that is planned for the future). My question is how this is configured in the tac_plus config?
I have read through this form, but I am still having issues:
https://community.cisco.com/t5/cisco-catalyst-center/dna-external-user-authentication-via-tacacs/td-p/4569785
We have previously set this up with a different customers Catalyst Center and gotten it to work, but that was towards a Cisco ISE server for TACACS. Here is a post on my blog about that:
https://blog.gurfin.se/post/adding-tacacs-via-ise-to-cisco-catalyst-center/
Currently this is what we have specified in our group in the tac_plus.cfg:
service = cas-service {
set cisco-av-pair="Role=SUPER-ADMIN-ROLE"
}
And if I check the /var/log/tac_plus/access/access.log, then i get this:
2025-01-15 <REDACTED TIME ZONE> <REDACTED NAS IP> <REDACTED USERNAME> 49 <REDACTED CLIENT IP> shell login succeeded
At the same time the Catalyst Center UI prompts me with "Login Failed".
