09-14-2021 11:12 AM
Hi. I need to authenticated my Cisco ASA with a Tacacs Server that is located through the outside interface. But I need specified the request with the ip address inside. I've been searching but can't find anything . Someone know how can I do this?ASA, tacacs, authentication, AAA
09-14-2021 12:19 PM - edited 09-14-2021 12:31 PM
If your tacas server is at outside in that case you have to specify the outside interace. unless you do a nat
Sorrry i did not read properly
aaa-server Name (outside) host X.X.X.X
*Name = Enter a AAA server group
09-14-2021 01:22 PM
Hi. Umm no. That It's a normal configuration. But our case. The tacacs server doesn't allow IP of the outside subnet (it's public). the server only allows IP addresses from the Inside segment
09-14-2021 01:52 PM
Is there a site to site vpn between ASA and the Tacacs? might you consider creating one as you request is the Tacacs server only allow the inside address. having a site to site tunnel will fix this issue.
09-14-2021 12:23 PM
example :
aaa-server servergroup1 outside host x.x.x.x
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide