TACACS Auth on FWSM 1.1(3)

[david.byrne]

Has anyone configured this? If so I would very much appreciate the procedure you used to do it, I presume you also need a TCP connection on port 49 defined in the access list to you ACS servers.

Many thanks in advance,

David

[scoclayton]

David,

I assume you are referring to authenticating admin sessions via TACACS. If not, please let me know.

Assuming so, take a look at the following document:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094e71.shtml

The FWSM uses the same CLI as the PIX for this type of setup.

And finally, you do not need an ACL entry allowing TCP/49 to the FWSM. ACL's on the FWSM/PIX only affect traffic going *through* the firewall rather than *to* the firewall. This is the same concept as not having to allow TCP or SSH in your access-list in order to manage the FWSM.

Hope this helps.

Scott

[david.byrne]

Scott,

This is fine, thanks for your help.

David