Question about TACACS source interface.

[andrea.meconi]

Hello.

I'm reading more posts about the "ip tacacs source-interface".

I'm using a Catalyst 4503 with IOS version 12.2(44)SG1 configured to use vlan101's IP address as source address for the T+ request.

However, the switch continues to use another IP and authetication fails.

The source-interface command is set globally and for the AAA group.

Any ideas?

Thanks.

Regards.

Andrea

[edwardcollins7]

Could you share the configuration you have ?

There might be an existing defect on this?

Do post this on the switching board as well, they might have an idea.

Rate if Useful :)

Sharing knowledge makes you Immortal.

Regards,

Ed

[andrea.meconi]

Hello Edward!

aaa new-model
!
!
aaa group server tacacs+ CiscoSecureACS
server 1.1.1.1
server 1.1.1.2
ip tacacs source-interface Vlan101
!
aaa authentication login default group CiscoSecureACS local
aaa authentication enable default group CiscoSecureACS enable
aaa authorization console
aaa authorization config-commands
aaa authorization exec default group CiscoSecureACS local
aaa authorization commands 0 default group CiscoSecureACS local
aaa authorization commands 1 default group CiscoSecureACS local
aaa authorization commands 15 default group CiscoSecureACS local
aaa accounting send stop-record authentication failure
aaa accounting exec default start-stop group CiscoSecureACS
aaa accounting commands 15 default start-stop group CiscoSecureACS
aaa accounting connection default start-stop group CiscoSecureACS
!
!
!
aaa session-id common
!
ip tacacs source-interface Vlan101
!
tacacs-server host 1.1.1.1 single-connection key 7 095841191809021C0A
tacacs-server host 1.1.1.2 single-connection key 7 061200314D421C1704
tacacs-server timeout 3
tacacs-server directed-request

Request from this switch comes from another IP interface....

[edwardcollins7]

Could send capture the traffic in between or provide me "debug tacacs+" and " debug aaa authentication"

Rate if Useful :)

Sharing knowledge makes you Immortal.

Regards,

Ed