Stealthwatch Backup SMC and CLI authentication

[Sachin Jha]

Hi Friends,

I have recently integrated TACACS+ with SMC , and I am able to authenticate via TACACS in Primary SMC.

1. I am not able to access individual Device  (flow collector/flow sensor etc.)  via TACACS only admin credential is working.

2. I am not able to Login and device ( Primary SMC/Secondary SMC/Flow Collector/Flow sensor etc.) CLI via TACACS only root password is working.

3. I am not able to login Secondary SMC GUI via TACACS only admin password is working.

Any Solution?

Regards

Sachin Jha

[Octavian Szolga]

Hi Sachin,

Have you checked Stealthwatch documentation about this one?

I have tested AAA on Stealthwatch appliances, and as far as I remeber, only SMC suports TACACS/RADIUS authentication.

Please check this guide:

https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/TACACS-/SW_7_1_2_TACACS_Configuration_Guide_DV_2_1.pdf

In the above link, you'll see the following note:

If TACACS+ is configured on the primary SMC, the TACACS+ user information is not available on the secondary SMC.

BR,

Octavian

[Sachin Jha]

Thanks Octavian, for your reply.

I am not able to clearly find any clarification , regarding above authentication scenario in any document.

Can anyone clarify me, is this expected authentication process ? or am I missing something?

Thanks