AAA Authentication

[h.parsons]

I am going to use another departments ACS to authenticate telnet sessions into my switches. They need an IP address to enter into the ACS for the client IP address. My question is: Which IP address do I give them from my CAT6500 switches running redundant sup2 in DRM/Hybrid? I have numerous ip addresses per switch.

Thanks

[steve.busby]

The easiest way to do this is use the "ip tacacs source-interface" command.

For instance, if int vlan1 has an ip address of 10.10.10.10/24, then simply use this on your 6500:

ip tacacs source-interface vlan1

and in your ACS server you would use the 10.10.10.10 ip address.

HTH

Steve