VPN router AAA issue

[xzjleo2005]

Hi

We have a router-ASA internet VPN. ASA is on central site, router is on remote site. We have a ACS server at central site behind the ASA, now we need the remote router to do AAA with the ACS server when someone logon to it. I added the config on ACS and router, but the problem is remote site router can not reach the ACS server unless the source ip is LAN ip. Anyone know if we can set the source ip to LAN ip for AAA reqeust packet on the router?

Thanks. Leo

[Collin Clark · Accepted solution]

Leo-

ip tacacs source-interface FastEthernet0/0

Hope it helps.

[Jatin Katyal]

Hi Leo,

Further to collin post...

yes that is possible.

on the router you need to use this command.

The ip tacacs source-interface configuration command allows you to specify a particular source IP address for TACACS.

And, On the ACS you need to add router with the same LAN IP address.

HTH

JK

[xzjleo2005]

Cool, thanks guys. Will have try and see how it goes.

Leo