TACACS and Cisco 2500 Async Lines

[sean.boston]

I have printers connected to a Cisco 2500 and we use reverse telnet for printing to the lines. How do I configure AAA so that it doesn't go to the TACACS server for authentication? I just want the TACACS on the vty, console and aux lines.

Thx

[Richard Burts]

my suggestion would be to configure a specific authentication method on the lines you do want to authenticate and then to configure the default login authentication to none. This should use tacacs for the lines where real users are logging in and should do nothing for the reverse telnet which is using the default. The relevent parts of the config might look like this:

line con 0

login authentication real_users

line aux 0

login authentication real_users

line vty 0 4

login authentication real_users

aaa authentication login default none

aaa authentication login real_users group tacacs+ line

HTH

Rick

[sean.boston]

What version of IOS is this command in? The version that I am using the "group" qualifier is not available.

[Richard Burts]

The routers I used as a source are running 12.3.

I looked in some older documentation and all you need to do is to omit the group parameter.

So the commands would be:

aaa authentication login default none

aaa authentication login real_users tacacs+ line

HTH

Rick