cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
567
Views
5
Helpful
2
Replies

Router Source address for ACS Server

cpopour
Level 1
Level 1

Does anyone know how to configure a router(MSFC in this case so the same ip address is sent to the ACS server for authenticating. The source address may not always be the same depending on the path taken, If the source address isnt an ip address configured for one of my devices the acs server rejects the attempt and the router defaults to local login. I tried settigng a loopback address and always telnetiing to the loopback address however the source address from the MSFC is not the loopback I have 38 vlans, snd i suppose i could configure thoe ip addresses under a device, however if iI add a vlan then I must remember to add that vlan to ACS. Im sure there is a simpler way to address this, I just cant seem to find the configs needed on the MSFC to make it work.

Any help will be greatly appreciated.

Thanks

2 Replies 2

andrew.burns
Level 7
Level 7

Hi,

Sounds like you need:

ip tacacs source-interface interface-name

(or ip radius source-interface interface-name)

It's recommended to use a loopback interface, so this would give you (assuming loopback0):

ip tacacs source-interface loopback0

HTH - plz rate if it does

Andrew.

Thats exactly it. Thanks