hi,
just a quick question, i noticed there's a couple of ways to define TACACS/AAA in an ASR router: under global config and the other is under AAA server group. my questions are:
1. will the "server-private' and "ip tacacs source-interface" work on the new IOS-XE 16.12.x code?
2. which approach is more preferred or "best practice" in configuring TACACS/AAA?
3.will i be "locked out" if i move the TACACS source interface from global config to AAA group?
GLOBAL CONFIG:
tacacs server TAC-1
address ipv4 10.11.6.2
key 7 cisco123
ip tacacs source-interface Loopback0
aaa group server tacacs+ GRP-1
server name TAC-1
AAA SERVER GROUP:
ASR(config)#aaa group server tacacs+ GRP-1
ASR(config-sg-tacacs+)#server-private 10.11.6.2 key 7 ?
LINE The HIDDEN shared key
ASR(config-sg-tacacs+)#ip tacacs ?
source-interface Specify interface for source address in TACACS packets
ASR(config-sg-tacacs+)#ip tacacs source-interface <INTF>
