The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
74 views

Cisco tacacs+ commands accounting

I've installed a tac_plus server to log commands executed on my Cisco catalyst 2960-s switch, with the following config key = "tackey" user = root { default service = permit member = admingroup login ...
0
votes
1answer
63 views

Linux TACACS+ authorization

I'd like to know to to authorize (only allow a set of commands) users on Linux console (bash). I'm so far able to authenticate ssh users over TACACS+ but authorization is not working. This is my ...
0
votes
0answers
27 views

Network device failing to access groups from Active Directory

Occurs only for only 1 user , when TACACS+ tries to authenticate and retreive groups it fails, according to logs authentication is a success but fails when retreiving groups with error, "24027 Groups ...
1
vote
0answers
219 views

Linux TACACS+ auth for SSH but allow users to use public key auth

we have running tacacs environment for centralised login to our routers, firewalls etc and even most of our linux boxes to ssh what we would like to do is allow users to authenticate to SSH via ...
2
votes
2answers
357 views

How does Arista EOS and Cisco IOS encrypt tacacs+ encyption keys?

We're using tacacs for AAA on our network devices, and I'm interested/curious in how our devices are encrypting the passwords device side. Following the Arista EOS manual, page 139, I'm running: ...
0
votes
0answers
36 views

How to configure AccessPoints/Switches for PAP,CHAP and other methods of Authentication?

Hope some one could shed some light here. TACACS+ Server gives option of User Authentication by following methods: 1. ASCII 2. PAP 3. CHAP 4. MSCHAP 5. ARAP But how does the server know which one to ...
0
votes
1answer
348 views

TACACS+ ACS 5.3 Err 'ACS: Resource not found or internal server error No information'

Has anyone experienced this issue before? Running: Cisco TACACS+ ACS 5.3 When I log in I see this displayed on the right pane. I still have the navigation links on the the left pane and able to ...
0
votes
3answers
1k views

TACACS+ - Cisco Router - Failover to local database not operating as it should

I have TACACS+ working and now I am trying to set it up so that it will failover locally if the TACACS+ server is unavailable. My goal is for it to check the TACACS server first, then failover if it ...
0
votes
1answer
183 views

F5 authentication using kerberos keytab

Our network gear use tacplus for authentication and authorization. tac itself authenticates using kerberos. For one of the projects we need automated login to a F5 device using a script. Does anyone ...
8
votes
1answer
7k views

Authenticate Linux sshd with TACACS+ (Cisco ACS)

Our network engineering team uses multiple linux servers for syslog collection, configuration backups, tftp, etc... We want to use TACACS+ on a Cisco ACS machine as our central authentication server ...
0
votes
1answer
253 views

Enabling command logging on a Cisco MDS Switch

We are able to send all commands entered by admins to syslog on our Pix and ASA devices but are having trouble finding the correct commands or log levels to do the same for our Cisco MDS 9xxx ...
0
votes
1answer
112 views

Does anybody have any good material on TacPlus?

Does anybody know, either good websites or books which can help us setup a Tacacs+ (tacplus) server? Any help would be appreciated. Thanks AB
2
votes
1answer
660 views

Passwordless Kerberos management of Cisco devices

Does anyone have any experience of using Kerberos as an authentication mechanism for managing a Cisco IOS based network? This article seems to indicate it's possible, but my Kerberos knowledge is ...
0
votes
1answer
1k views

IOS: tie SNMP v3 credentials to TACACS or RADIUS?

On Cisco IOS, I'm looking at moving from SNMP v1/2 to v3, which means separate user/password credentials instead of just community strings. Is it possible to have those user credentials pulled from, ...