×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Load Balancing TACACS Authentication Servers

Unanswered Question
Mar 1st, 2004
User Badges:

I'm using a CSS1150 to Load Balance AAA servers, for login requests coming from users connecting to Access Servers. (RAS Users authentication).


I have the services configured as port 49.


How do I do health checking for this service?

Is the only way to write a script and put in a

user name and password?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Gilles Dufour Tue, 03/02/2004 - 06:58
User Badges:
  • Cisco Employee,

you can check a service at different level.


- response to ping

- open a tcp connection and close it

- submit a true request


The first 2 options can easily be done with existing keepalive functions, but the last one requires a script.


If you go for the script, what you can do is sniff a request going to your tacacs server and save the hexadecimal info. You can then type this hexadecimal part in your script and replay it using the 'raw' keyword.


Regards,


Gilles.

Actions

This Discussion