cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3635
Views
0
Helpful
1
Replies

New tacacs commands in ios 15

g.hammond
Level 1
Level 1

Sorry if this has been addressed before but I need a little assistance with configuring aaa/tacacs on my ISR routers running v15.  The issue I am having is the changing of the format from v12 (or before).  In v12, I used the following commands to identify my servers and server key

tacacs-server host 10.x.x.10

tacacs-server host 10.x.x.11

When I type these commands in version 15, I get the following alert message:

This cli will be deprecated soon. Use new server cli

I have been unable to find the proper syntax to utilize the new server cli.  My aaa/tacacs config looks like the following in v12:

aaa new-model

aaa authentication fail-message ^Login failed, please use a valid Username and Password.^

aaa authentication login default group tacacs+ line enable none

aaa authorization exec default group tacacs+ none

aaa authorization network default group tacacs+

aaa accounting send stop-record authentication failure

aaa accounting exec default

action-type start-stop

group tacacs+

aaa accounting commands 15 default

action-type start-stop

group tacacs+

aaa accounting network default

action-type start-stop

group tacacs+

aaa accounting system default

action-type start-stop

group tacacs+

tacacs-server host 10.x.x.10

tacacs-server host 10.x.x.11

tacacs-server key <serverkey>

I really just need to know how to convert the tacacs-server host commands into the new v15 format.

Thank you.

1 Reply 1

Reza Sharifi
Hall of Fame
Hall of Fame

Try this instead of tacacs-server host

tacacs-server authentication

address ipv4 10.x.x.10

address ipv4 10.x.x.11

HTH