cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
506
Views
0
Helpful
2
Replies

How to fix TacacsPrompts on LMS 3.2?

Fantaw Tesema
Level 1
Level 1

We have enabled TACACS for all devices and configured custom TACACS login and passwords prompts. This has created a Telnet problem and huge amount of log files in our log server. Got information in RME user guide, but could not find more in CS guide.

I have edited TacacsPrompts.ini file under CSCOpx\objects\cmf\data as follows:

[TELNET]

USERNAME_PROMPT=theusername

PASSWORD_PROMPT=thepassword

 

Is the above method correct? Or do I have to do more? Any processes in LMS do I look for?

The above alone seems not working. I have also run stop/start of Daemon manager. Tried again to Telnet one of the switches from Device Center to check Device Credential. No luck. The username and password is the same as Primary Credential used when adding switches to LMS. This is happening on all hundreds of switches we have on our network.

 

PS: Other things I needed work well except this issue.

Using LMS 3.2 on Win 2008 Server SP2.

Guide with how to steps will be very much appreciated!

 

Fantaw

2 Replies 2

AFROJ AHMAD
Cisco Employee
Cisco Employee

Hi Fantaw,

TacacsPrompts.ini seems to be fine.

 

try this::

These keys are required to enable telnet support.

For the 32 bit versions of Windows;

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_DISABLE_TELNET_PROTOCOL]

"iexplore.exe"=dword:00000000

"explorer.exe"=dword:00000000

 

For the 64 bit versions of Windows;

Windows Registry Editor Version 5.00

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_DISABLE_TELNET_PROTOCOL]

"iexplore.exe"=dword:00000000

"explorer.exe"=dword:00000000

 

hope it will help

 

Thanks-

Afroz

***Ratings Encourages Contributors ***

Thanks- Afroz [Do rate the useful post] ****Ratings Encourages Contributors ****

Thanks for quick answer Afroz!

We are working on it. As for now I use only the TFTP protocol on Config Transport Settings and moved Telnet to Available Protocols. Backup configurations are fetched with TFTP which is really nice.

Are there other more advantages with Telnet in LMS 3.2 than Device Credential Verification check? If a device is in question then one can always manually check from for ex Device Center.  

Fantaw