cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
402
Views
0
Helpful
2
Replies

Multiple TACAS+ Settings on a Router

lfranchini1
Level 1
Level 1

I have been tasked to setup a bunch of remotes sites to a different AAA/TACACS server.

Can I run the old settings and the new settings on a router without any conflicts?

What issues could I run into?

2 Replies 2

I'm not sure I understand your question.

You can have multiple TACACS+ servers on the configuration, and use them for different purposes. Can you please expand a bit on what you're trying to accomplish?

Javier Henderson

Cisco Systems

TACACS setup present

aaa group server tacacs+ tacacs_admin
 server 
 server
!
aaa authentication login default group tacacs_admin local
aaa authentication enable default group tacacs_admin enable
aaa accounting exec 15 start-stop group tacacs+
aaa accounting exec 1 stop-only group tacacs+
aaa accounting commands 1 default stop-only group tacacs+
aaa accounting commands 15 default stop-only group tacacs+

TACACS setup new

aaa group server tacacs+ name
 server 
 server 
 server 
 ip tacacs source-interface Serial0/0/0

aaa authentication login default group name local
aaa authentication login console none
aaa authorization console
aaa authorization exec default group name local
aaa authorization exec console none
aaa accounting exec default start-stop group name

Different TACACS keys also

Can I run both at the same time until I verify the new setup is working?