02-05-2011 06:16 AM - edited 03-10-2019 05:48 PM
I am facing issue for 3com router with acs.
I am able to login to 3com router through my tacacs ID, but for enable password i need to use local password.
is there any solution on this i want my both password should TACACS only.
my acs using windows user database.
02-05-2011 07:24 AM
Hi,
You can go to User Set up and go to Advanced Tacacs+ setting , there you will find an option as "TACACS+ Enable Password".
You can have 3 options:-
[1] Use the same user password as enable password
[2]Use password from external database
[3]Use seperate enable password
If you do not see Advance Tacacs+ setting, go to Interface Configuration, select Tacacs+ and under "Advanced Configuration Options" check the box
Advanced TACACS+ Features.
You will get an option for setting the enable password.
I hope it helps.
Thanks,
Shilpa
02-06-2011 12:33 AM
i missed to point out one thing that, users from the same group which is used to login into 3com router is able to login into cisco routers properly.they are using both password from tacacs only, but for 3com its not working.
02-06-2011 01:25 AM
Hi,
When you say, users are not able to login to 3com router, are you not able to login at all or you are not able to do enable authentication on 3com router.
Also you can check the failed reports on ACS and we can check the error that we are getting while we login.
And it would be great if you can paste the aaa configuration from one of the cisco router and 3com router.
Thanks,
Shilpa
02-07-2011 03:21 AM
Hi Shilpa,
Thnx for your inputs, i have query on your erlier post.
options provided for enable password is for TACACS+, but i am using radius on 3com routers.
is there any option for radius as well.
02-10-2011 09:43 PM
Hi All,
Can anybody please explain how to add vendor.ini file to ACS Appaliance.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide