Enabling TACACS authentication on Router with Async ports

[v.ram]

Hi,

I need to enable TACACS authentication for few Cisco 2620 Routers ((C2600-IS56I-M), Version 12.1(5)T) with Aysnc ports (Slot 1:Async Port adapter,32ports). Line interfaces were configured to accept reverse telnet call. Line 34 is connected to an ATM controller which calls an ATM machine connected on Line 48 (the configs are attached).

When tacacs commands are applied, tacacs authentication is not working and ATMs goes offline. In this scenario, ATM is Automatic Teller Machine.

Can anyone of you help me with exact tacacs configuration for Router having pure Async ports.

It would be great if you give me relevant URLs.

Thanks

VJ

[Richard Burts]

I must admit that as I start to try to answer your question I am a bit confused about what you are attempting to accomplish and what the environment is. I am not sure whether you want tacacs to authenticate on the console and vty ports or not. And a little bit confused about the relationship of line 34 and line 48 and whether you want tacacs to authenticate on either of them. Can you clarify a bit about this?

If you do want tacacs to authenticate on console and vty ports then I suggest that you add this under the aaa new model:

aaa authentication login default group tacacs+ local

HTH

Rick

[v.ram]

Hi Rick,

Thanks for the reply. However, the issue has been resolved with the following commands.

Global config mode:

aaa authorization exec test none

Line config mode:

authorization exec test (on line 34 which is initiating the telnet call).

We had created a profile 'test' and made it to do local authentication.

Your inputs pls.

Rgds,

Vj

[Richard Burts]

VJ

I am glad that you got your issue resolved.

I had noticed that you specified authentication method test on line 34 and used it to specify authentication local. And in a way it makes sense that if you were doing some authorization in aaa that you might need to specify no authorization for test.

HTH

Rick