Ciscoworks login through TACACS+

[ghaworth]

Hi,

We have users authenticating on our Routers via TACACS+ using a SecurID token on an ACE Server. The password obviously changing every 30 seconds.

However we have Ciscoworks2000 configured to retrieve a startup-config every evening from all Routers. Ciscoworks2000 uses Telnet not SNMP to retrieve this configuration and hence is being greeted with the TACACS+ authentication prompt.

It continually fails since the password is always changing.

Does anyone have any ideas how to circumvent this either by reconfiguring the ACE Server, Ciscoworks or the Routers?

Regards,

Grant Haworth

[wdrootz]

Can’t you configure it so the CiscoWorks server bypass’s authentication? You might want to run this one by Cisco for a more secure alternative.

[rrussell]

Remove the telnet and enable password fields in CW2000. We just have the SNMP community strings in our instance of CW2000 (CD One 4th edition, RME 3.3) and we are successfully retrieving the startup and running configs. You may lose some other functionality, but it all depends on what you're using it for.

[grim]

Hi,

Either use SNMP only, or setup RCP. CiscoWorks2000 will pull configs using either of these methods in addition to telnet. SSH should be used to connect to routers - telnet is not secure...