cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
761
Views
0
Helpful
2
Replies

Tacacs source Address issue

sutharhemant90
Level 1
Level 1

Hi,

on our router two IP addresess are configured as mentioned below and we are not able to configure the TACACS server due to source address issue where we can only configure source interface which is taking source IP address 192.168.11.25. Please let me know if there is any config where i can configure IP tacacs source address as a 192.168.7.55 instead of source interface.

                

interface FastEthernet0/0

description # CONNECTED TO LAN #
ip address 192.168.7.55 255.255.255.0 secondary
ip address 192.168.11.25 255.255.255.0

1 Accepted Solution

Accepted Solutions

John Blakley
VIP Alumni
VIP Alumni

When you set up a source interface, it will always take the primary address as the source. You can set up another ip address on a loopback interface, but you wouldn't be able to use the 192.168.7.0/24 subnet on the loopback as it's already used as a secondary on the lan interface.

You could set up a loopback interface that references the host like:

int lo1

ip address 10.10.7.7 255.255.255.255

You'd have to set this up for routing so the tacacs server could get to it, but those are a couple of options. The other option is to swap the two addresses if you need them both on the lan interface.

HTH,
John

*** Please rate all useful posts ***

HTH, John *** Please rate all useful posts ***

View solution in original post

2 Replies 2

John Blakley
VIP Alumni
VIP Alumni

When you set up a source interface, it will always take the primary address as the source. You can set up another ip address on a loopback interface, but you wouldn't be able to use the 192.168.7.0/24 subnet on the loopback as it's already used as a secondary on the lan interface.

You could set up a loopback interface that references the host like:

int lo1

ip address 10.10.7.7 255.255.255.255

You'd have to set this up for routing so the tacacs server could get to it, but those are a couple of options. The other option is to swap the two addresses if you need them both on the lan interface.

HTH,
John

*** Please rate all useful posts ***

HTH, John *** Please rate all useful posts ***

Thanks a lot for your answer on this.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card