Tacacs source Address issue

[sutharhemant90]

Hi,

on our router two IP addresess are configured as mentioned below and we are not able to configure the TACACS server due to source address issue where we can only configure source interface which is taking source IP address 192.168.11.25. Please let me know if there is any config where i can configure IP tacacs source address as a 192.168.7.55 instead of source interface.

interface FastEthernet0/0

description # CONNECTED TO LAN #
ip address 192.168.7.55 255.255.255.0 secondary
ip address 192.168.11.25 255.255.255.0

[John Blakley · Accepted solution]

When you set up a source interface, it will always take the primary address as the source. You can set up another ip address on a loopback interface, but you wouldn't be able to use the 192.168.7.0/24 subnet on the loopback as it's already used as a secondary on the lan interface.

You could set up a loopback interface that references the host like:

int lo1

ip address 10.10.7.7 255.255.255.255

You'd have to set this up for routing so the tacacs server could get to it, but those are a couple of options. The other option is to swap the two addresses if you need them both on the lan interface.

HTH,
John

*** Please rate all useful posts ***

[sutharhemant90]

Thanks a lot for your answer on this.