TACACS is not working to Authenticate ASA over VPN

[shailesh_ud]

Hi Guys,

AAA server is behind the S2S VPN and All traffic from ASA2 is passing over VPN.

AAA Server -> ASA1 ->Internet -> ASA2

                       <------------S2S VPN--------->

we have tried configuring TACACS as inside on ASA2 but it’s not working

aaa-server TACACS (inside or outside) host XXXX

Can you please help to find solution of this situation.

Regards,

Tejas Thakkar

[rvarelac]

Hi Tejas ,

Make sure the IP of the TACACS server is part of the interesting traffic , also enabled management-access inside on the ASA1.  A packet-tracer might confirm if everything is working fine.

Hope it helps

- Randy-