cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
11488
Views
0
Helpful
1
Replies

"This cli will be deprecated soon. Use new server cli" seen on 2951 Router

Norix S
Level 1
Level 1

Experts,

we have recently encountered the prompt:

"This cli will be deprecated soon. Use new server cli"

See Attached for illustration

We were wondering what are the impact of this to our Network basically?

What are solutions we could do to comprehend on this?

To sum up, we want to know if this is something needing immediate attention or 

otherwise we could assume that it is not worrisome at all.

we do found links online that discuss this but

there were no direct solution out from it.

http://slaptijack.com/networking/new-style-tacacs-configuration/

 

Device info:

"PID : CISCO2951/K9 "

"flash0:c2951-universalk9-mz.SPA.152-4.M4.bin"

Hopefully, we could get a sound advice.

Norix S

1 Reply 1

Mark Malone
VIP Alumni
VIP Alumni

Hi There is no impact at all they have just changed the way the syntax is deployed on newer versions of release they do this regularly with commands   , it can be deployed that way now as per your link or this way too below under the actual aaa

aaa group server tacacs+ xtacacs
 server-private x.x.x.x key 7 151F4E36366F237D2A64637F404632483002187F7D
 server-private x.x.x.x key 7 1214402D204E045D287C7275607406583642422678
 ip vrf forwarding Mgmt-vrf
 ip tacacs source-interface GigabitEthernet0/0/5

As you can see some newer releases have already removed it so you have to configure the tacacs slightly different now but there are multiple methods

(config)#tacacs-server ?
  administration    Start tacacs+ deamon handling administrative messages
  attribute         Customize selected tacacs attributes
  cache             AAA auth cache default server group
  directed-request  Allow user to specify tacacs server to use with `@server'
  dns-alias-lookup  Enable IP Domain Name System Alias lookup for TACACS
                    servers
  domain-stripping  Strip the domain from the username
  packet            Modify TACACS+ packet options
  timeout           Time to wait for a TACACS server to reply