Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

3560 secondary ip address

I've got L2 switch with a secondary IP address configured (for management purposes), it's connected to a ADSL router and we're 'natting' on the router to the secondary IP address - all seems to be working OK.

When we apply aaa to the L2 switch, it doesn't seem to respond to the tacacs server - does tacacs always work to the primary ip address ? or is there a way to communicate with the secondary address ?

Everyone's tags (1)
1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Re: 3560 secondary ip address

Hello.

Please try using ip tacacs source-interface but fisrt try pinging tacacs+ from this particular SVI using ping source .

Hope this helps.

3 REPLIES
New Member

Re: 3560 secondary ip address

Hello.

Please try using ip tacacs source-interface but fisrt try pinging tacacs+ from this particular SVI using ping source .

Hope this helps.

New Member

Re: 3560 secondary ip address

Thanks...just tryied this morning and all working OK now.

New Member

Re: 3560 secondary ip address

> lease try using ip tacacs source-interface

How do you do that?

As far as I see you can't assign IP-addresses as source-interface (at least with IOSs we're using):

ip tacacs source-interface

To use the IP address of a specified interface for all outgoing TACACS+ packets, use the ip tacacs source-interface command in global configuration mode. Use the no form of this command to disable use of the specified interface IP address.

ip tacacs source-interface subinterface-name

no ip tacacs source-interface

Syntax Description

subinterface-name

Name of the interface that TACACS+ uses for all of its outgoing packets.

662
Views
0
Helpful
3
Replies
CreatePlease login to create content