Configuring CW2K to use TACACS+ Authentication

[james.lopez]

Is there anyway to specify more than one TACACS+ server for authenticating access to CW2K?

[vnealy]

Just one question, why whould you want to do this?

Thank you.

[bbecker]

I would assume the answer would be for redundancy. I would want the same thing. I have 2 production ACS servers that are in a primary/backup configuration. It would be nice to specify 2.

[james.lopez]

Yes, for redundancy.

I did try a comma between two server addresses and that just prevented either from working.

[cnservices]

i try to configure Ciscowork to use TACACS+, since i have a ACS server running...but i just want to make sure i didn't get the idea wrong, is that means when i configured Ciscowrok to use TACACS+ login, i can use the users available in the ACS server to login to the Ciscoworks?

i tried but it can't seems to be working, i need to re-create all the users at the Ciscoworks side...thanks

[tsdkl]

Yes. If you setup CiscoWorks to authenticate using ACS server, you will also have to create the same users in CicsoWorks server. If you don't, users will not have able to log on to CiscoWorks even the users have already defined in ACS.

Also, in LMS 2.2 you can only define ONE ACS server in CiscoWorks. I am told that you can define up to 3 ACS servers in LMS 2.5 (coming out soon).

[vnealy]

The users names must match in CW and ACS in order for it to work.

[gurcan_basural]

user want login a server over router with ppp authentication ,

1)which ip will user write " server or router "

2)if it is server ip ,is there any map to server ip

3)if it is router ip , how acs server will give the authorization , path of the server

4) over server ı dont use active directory , how can ı login there

I succeeded in to login network , when ı wrote ip address of router to explorer authenticated then nothing but when I wrote server ip to explorer no authenticate