Tacacs Source interface for Default and Vrf possible?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-11-2024 01:21 AM
Hej
I am trying to configure Tacacs access to ASR9900 (7.11.1) series device through both default and mgmt vrf. Default will be the primary since it will be first in the aaa authentication order.
I would like the tacacs request from default to be created by the Loopback 0, but I figured that would mess with tacacs access through Mgmt vrf since all requests would be sent from loopback 0.
Is there a way to create a souce-interface per vrf for tacacs?
Other option I see is that I do not set a source-interface, but then the egress interfaces would send requests to the tacacs server instead of the loopback as I see it.
Regards
- Labels:
-
Network Management
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-11-2024 05:49 AM
Ahhhh the vrf command comes after you specify the interface. Normally you have to define vrf before specifying interface so I never tried it.
So it would look like this then right?
tacacs source-interface Loopback0
tacacs source-interface MgmtEth0/RP0/CPU0/0 vrf OOBM
