Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Load Balancing TACACS Authentication Servers

I'm using a CSS1150 to Load Balance AAA servers, for login requests coming from users connecting to Access Servers. (RAS Users authentication).

I have the services configured as port 49.

How do I do health checking for this service?

Is the only way to write a script and put in a

user name and password?

1 REPLY
Cisco Employee

Re: Load Balancing TACACS Authentication Servers

you can check a service at different level.

- response to ping

- open a tcp connection and close it

- submit a true request

The first 2 options can easily be done with existing keepalive functions, but the last one requires a script.

If you go for the script, what you can do is sniff a request going to your tacacs server and save the hexadecimal info. You can then type this hexadecimal part in your script and replay it using the 'raw' keyword.

Regards,

Gilles.

594
Views
0
Helpful
1
Replies
CreatePlease to create content