AAA on Async Lines

[shaucall46]

Hi

We have async lines between 2 sites to stream SCADA type information

When we have applied AAA Tacacs to routers this has been no problem until lines are reset then I guess as EXEC sets up connection it fails as no AAA authentication.

Due to criticallity of information I have taken AAA off routers for now but looking for long term solution.

Can I config the lines to authenticate locally using local username/password or even for these partcicular lines not to authenticate.?

Any help appreciated

[Richard Burts · Accepted solution]

I had a situation which was sort of similar to yours. Perhaps the solution that I found might work for your situation. I had async lines that I wanted to authenticate to a server group that was different from what the telnet/SSH authentication used. I configured the aaa authentication default to use what I wanted on the asyn lines. In your case it might specify local login to use local ID and password or perhaps you might specify none as the authentication method. Then I specified a named authentication method using the other server group and specified the named authentication method on the vty lines.

HTH

Rick

[shaucall46]

Thanks

Did the trick on my lab setup, also had to do similiar commands for authorisation commands.

Many Thanks.

[Richard Burts]

Yes, if you are doing authorization then the same approach works for that also.

I am glad that my suggestions pointed you to a solution for your issue. Thank you for marking the question as answered/resolved (and thanks for the points). It makes the forum more useful when people can read about an issue and can know that they will find a solution to that issue. Your marking the question will help other readers to make effective use of the forum.

HTH

Rick