TACACS via vrf

[vin.marco]

Hello everyone
they asked me to configure access to the ASR devices via tacacs + via VRF, while if I log in via IP in global i have to use local credentials.
Do you think it is possible?

[Mohammed al Baqari · Accepted solution]

Hi,

Yes it is possible. If you are using local cred, then your TACACS isn't
reachable from your ASR VRF.

Check your config and make sure your TACACS server is reachable. Here is an
example

aaa group server tacacs+ tacacs1
server-private 10.1.1.1 port 19 key cisco
ip vrf forwarding cisco
ip tacacs source-interface Loopback0
ip vrf cisco
rd 100:1
interface Loopback0
ip address 10.0.0.2 255.0.0.0
ip vrf forwarding cisco

**** please remember to rate useful posts

[Ruhtra]

what determines what loopback IP address to use?