09-14-2021 11:12 AM
Hi. I need to authenticated my Cisco ASA with a Tacacs Server that is located through the outside interface. But I need specified the request with the ip address inside. I've been searching but can't find anything . Someone know how can I do this?ASA, tacacs, authentication, AAA
09-14-2021 12:19 PM - edited 09-14-2021 12:31 PM
If your tacas server is at outside in that case you have to specify the outside interace. unless you do a nat
Sorrry i did not read properly
aaa-server Name (outside) host X.X.X.X
*Name = Enter a AAA server group
09-14-2021 01:22 PM
Hi. Umm no. That It's a normal configuration. But our case. The tacacs server doesn't allow IP of the outside subnet (it's public). the server only allows IP addresses from the Inside segment
09-14-2021 01:52 PM
Is there a site to site vpn between ASA and the Tacacs? might you consider creating one as you request is the Tacacs server only allow the inside address. having a site to site tunnel will fix this issue.
09-14-2021 12:23 PM
example :
aaa-server servergroup1 outside host x.x.x.x
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: