04-10-2024
01:01 PM
- last edited on
04-10-2024
01:23 PM
by
shule
Cant login with gns3/gns3 default username/pass on tacacs appliance
aaa new-model
!
!
aaa group server tacacs+ BOOM
server name TACACS
!
aaa authentication login default group BOOM local
aaa authorization exec default group BOOM local
aaa accounting commands 15 default none
!
!
!
!
!
aaa session-id common
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no ip icmp rate-limit unreachable
ip auth-proxy max-login-attempts 5
ip admission max-login-attempts 5
!
!
!
!
!
no ip domain lookup
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
crypto pki token default removal timeout 0
!
!
username cisco password 0 cisco123
!
redundancy
!
!
ip tcp synwait-time 5
!
!
!
!
!
!
!
!
!
!
!
!
interface Ethernet0/0
ip address 10.1.1.1 255.255.255.0
!
interface Ethernet0/1
no ip address
shutdown
!
interface Ethernet0/2
no ip address
shutdown
!
interface Ethernet0/3
no ip address
shutdown
!
interface Ethernet1/0
no ip address
shutdown
!
interface Ethernet1/1
no ip address
shutdown
!
interface Ethernet1/2
no ip address
shutdown
!
interface Ethernet1/3
no ip address
shutdown
!
interface Serial2/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/3
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/3
no ip address
shutdown
serial restart-delay 0
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
!
tacacs server TACACS
address ipv4 10.1.1.2
key gns3
04-10-2024 01:09 PM
Share
Show aaa server
Debug aaa authentication
MHM
04-10-2024 04:36 PM
User usernames are bob and alice (pwd: gns3).
TACACS+ shared secret is gns3
I assume your IOS device can ping the TACACS+ server on 10.1.1.2 ?
You can also test the AAA from the IOS command line
test aaa group BOOM bob gns3 new-code
04-13-2024 05:49 AM - edited 04-13-2024 05:50 AM
Yes the pinging is fine
I used the test aaa command above, same issue with the debug
I will post this later today maybe
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide