Tacacs config on WAAS device

gopal_4476 · ‎05-24-2008

All,

we have tried to configure AAA on WAAS (Wide Area Application Services)device. we have applied all the aaa commands on waas device and made necessary configs changes on tacacs server as well.

WAAS device is speaking to tacacs server and I am able to login to waas device through tacacs id, the problem here is when i tried to go to enable mode on waas device its not accepting my tacacs password instead its taking local password.

I am sure i am missing something here, can any one throw some lights here to solve this issue as this is very ciritcal activity for me.

Many thanks in advance and pasted AAA configs applied on WAAS device.

authentication login tacacs enable primary

authentication login local enable secondary

authentication configuration tacacs enable primary

authentication configuration local enable secondary

aaa accounting commands 15 default start-stop tacacs

tacacs host **.**.**.* primary

tacacs key ******

Regards,

Gopal

mahmoodmkl · ‎05-24-2008

Hi

u need to add the below line in u r config

aaa authentication enable default group tacacs+

Thanks

Mahmood

gopal_4476 · ‎05-24-2008

Hi Mahmood,

Thanks for your reply, I have applied the given command and its not accepting.

Its Cisco WAAS router ruuing below ios.

Cisco Wide Area Application Services Software (WAAS)

Cisco Wide Area Application Services Software Release 4.0.13 (build b23 Sep 8 2007)

Version: oe7341-4.0.13.23

Compiled 18:41:02 Sep 8 2007 by cnbuild

System was restarted on Sat Apr 12 13:49:26 2008.

The system has been up for 5 weeks, 6 days, 20 hours, 37 minutes, 16 seconds.

Regards,

Gopal

mahmoodmkl · ‎05-24-2008

Hi

can u try this

authentication enable tacacs enable primary

Thanks

Mahmood

mahmoodmkl · ‎05-24-2008

Hi

can u try this

authentication enable tacacs enable primary

Thanks

Mahmood

gopal_4476 · ‎05-24-2008

Yes, tried this. Nothing is working.

Regards,

Gopal

Richard Burts · ‎05-24-2008

Gopal

Pretty clearly the problem is that it is requiring the local enable password because there is no configuration in aaa for authenticating enable. So we need to find the correct syntax to use. Can you post the output that you get from online help?

- go into config mode.

- type aaa authentication enable ?

- if it shows default as an option then type

aaa authentication enable default ?

Perhaps this will help us figure what syntax it is looking for.

HTH

Rick

HTH

Rick

sansuresh · ‎05-29-2008

Hi Rick,

i am able to login via Telnet but unable to login via GUI.

Gopal