"ip tacacs source-interface" command not working

[mjmnetsec]

I have a C-3750 L3 switch that's part of a project to get ACS-based authentication configured, and while I'm able to get most of the devices working, this one switch won't take the ip tacacs source-interface command. Can someone confirm whether this is an IOS issue?:

---C-3750-a(config)#ip tacacs source-interface loopback0

                                 ^

% Invalid input detected at '^' marker.

Current IOS on the device:

Switch Ports Model              SW Version            SW Image                

------ ----- -----              ----------            ----------              

*    1 28    WS-C3750G-24PS     12.2(44)SE            C3750-ADVIPSERVICESK9-M 

     2 28    WS-C3750G-24PS     12.2(44)SE            C3750-ADVIPSERVICESK9-M 

--

Thanks!

[Abha Jha · Accepted solution]

Its a bug:-

CSCsm28901

"ip tacacs source-interface" command missing in 12.2.44SE.

Please move to another IOS.

[churchilroy.garg1]

Instead of using the ip tacacs source-interface Loopback0 command in the global config mode, specify the source interface in the server group-

Example - 

aaa group server tacacs+ TACACS+_ISE
server-private <server IP> key <key>

ip tacacs source-interface Loopback0

[Jatin Katyal · Accepted solution]

Since this is a known defect because ip tacacs source-interface" isn't available globally, you should be able to include it in a group configuration, for example:

tacacs-server host key

aaa group server tacacs+ TAC

server

ip tacacs source-interface

aaa authentication login default group TAC local

Let me know if you have any further queries.

~BR
Jatin Katyal

**Do rate helpful posts**

[mjmnetsec]

Thanks for confirming the fact that this is a bug. The workaround worked just fine. Thank you.

[Jatin Katyal]

Uw. Thanks for updating/closing the thread.

~BR
Jatin Katyal

**Do rate helpful posts**