Solved: 3560 secondary ip address

craig.a.smith · ‎09-20-2010

I've got L2 switch with a secondary IP address configured (for management purposes), it's connected to a ADSL router and we're 'natting' on the router to the secondary IP address - all seems to be working OK.

When we apply aaa to the L2 switch, it doesn't seem to respond to the tacacs server - does tacacs always work to the primary ip address ? or is there a way to communicate with the secondary address ?

Kostas Kyriakos · ‎09-26-2010

Hello.

Please try using ip tacacs source-interface but fisrt try pinging tacacs+ from this particular SVI using ping source .

Hope this helps.

View solution in original post

Kostas Kyriakos · ‎09-26-2010

Hello.

Please try using ip tacacs source-interface but fisrt try pinging tacacs+ from this particular SVI using ping source .

Hope this helps.

craig.a.smith · ‎09-27-2010

Thanks...just tryied this morning and all working OK now.

rolf.fischer_2 · ‎03-14-2011

> lease try using ip tacacs source-interface

How do you do that?

As far as I see you can't assign IP-addresses as source-interface (at least with IOSs we're using):

ip tacacs source-interface

To use the IP address of a specified interface for all outgoing TACACS+ packets, use the ip tacacs source-interface command in global configuration mode. Use the no form of this command to disable use of the specified interface IP address.

ip tacacs source-interface subinterface-name

no ip tacacs source-interface

Syntax Description


subinterface-name	Name of the interface that TACACS+ uses for all of its outgoing packets.