LMS 4.0/4.1 as tacacs server

[vaughancahill]

   Hi Just a quick one, been looking to consolidate a number of management products and LMS seems to tick nearly all of them off except Tacacs requirement. I've been looking through various LMS Guides and trying to find out if the LMS can act as a tacacs server as I would like to get ride of the current unix system or do I need to use another solution? If so can anyone suggest something that works well with LMS...

Thanks.

[Joe Clarke]

LMS does not include a TACACS+ or any other AAA server.  It is strongly recommended that you do not install one along side the LMS server on the same logical server.  The reason for this is that you do not want NMS maintenance to affect your network access.  You also want to limit the number of potential attack vectors one could use to compromise your AAA server.

The leading recommendation is to put your AAA application on a dedicated physical server with strict physical and network access restricitions.  If that is not possible, at least dedicate a virtual machine for AAA.