TACACS and Cisco ACE Load Balancers authentication ?

[florrieford]

Is there a need to have user accounts locally on the Cisco ACE Load Balancers as well as the User accounts on TACACS where it is being authenticated ?

Many thanks

Florrie

[Collin Clark]

Yes.

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA3_1_0/configuration/security/guide/aaa.html#wpmkr1517596

[florrieford]

Colin

Many thanks for that, just seems strange, as it seems pointless especially as the ACE Load Balancers can only have 20 User accounts on there.

Cheers

Florrie

[Collin Clark · Accepted solution]

The username account has to be there (I agree that's dumb), but the password is arbitrary because it does auth back to ACS. From what I remember it had something to do with access to contexts and ACS not being able to determine what context is which and for what user. Hopefully it get 'fixed' in ACS 5 and a later version of ACE.