cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
438
Views
0
Helpful
1
Replies

aaa default client

sonjam
Level 1
Level 1

I'm setting up a new TACACS server and would like to use a wildcard ip address in the client configuration rather than enter all 242 devices (or import them in). Is there a reason why I shouldn't do this?

1 Reply 1

Richard Burts
Hall of Fame
Hall of Fame

Sonja

If you use the wildcard then your server will treat every source that sends it traffic on the correct port as a valid client. From a security perspective that seems to me to be a pretty big hole in your security posture.

HTH

Rick

HTH

Rick
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: