среда, 19 февраля 2014 г.

New-Style TACACS+ Configuration for IOS 15.0

While working with Cisco Catalyst IOS image 12.2(58)SE1, I noticed that configuration for TACACS+ had changed. My first clue that there was a problem was the following:
 
switch(config)#tacacs-server host 192.168.9.25
This cli will be deprecated soon. Use new server cli 
 
Ominous.

It seems that part of the reason for the change is so that you can now specify an IPv4 and IPv6 address for each TACACS+ server.
Listed below is the old school TACACS+ configuration I was using.


tacacs-server host 192.168.9.25 
tacacs-server key rycserdOb 
!
aaa group server tacacs+ TAC_PLUS 
    server 192.168.9.25

 
This now becomes:
tacacs server AUTH 
    address ipv4 192.168.9.25 
    key rycserdOb 

aaa group server tacacs+ TAC_PLUS 
    server name AUTH
 
 
 
 
 
 
 
tacacs server AUTH1
 address ipv4 192.168.9.25
 key rycserdOb
!
tacacs server AUTH2
 address ipv4 192.168.9.100
 key rycserdOb
!
aaa group server tacacs+ TAC_PLUS
 server name AUTH1
 server name AUTH2

1 комментарий:

  1. Запомните, что сначала надо выполнить aaa new-model иначе новый синтаксис недоступен.

    You remember ferst must issue "aaa new-model" befor you use new sintax.

    ОтветитьУдалить