cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1618
Views
0
Helpful
3
Replies

3560 secondary ip address

craig.a.smith
Level 1
Level 1

I've got L2 switch with a secondary IP address configured (for management purposes), it's connected to a ADSL router and we're 'natting' on the router to the secondary IP address - all seems to be working OK.

When we apply aaa to the L2 switch, it doesn't seem to respond to the tacacs server - does tacacs always work to the primary ip address ? or is there a way to communicate with the secondary address ?

1 Accepted Solution

Accepted Solutions

Kostas Kyriakos
Level 1
Level 1

Hello.

Please try using ip tacacs source-interface but fisrt try pinging tacacs+ from this particular SVI using ping source .

Hope this helps.

View solution in original post

3 Replies 3

Kostas Kyriakos
Level 1
Level 1

Hello.

Please try using ip tacacs source-interface but fisrt try pinging tacacs+ from this particular SVI using ping source .

Hope this helps.

Thanks...just tryied this morning and all working OK now.

> lease try using ip tacacs source-interface

How do you do that?

As far as I see you can't assign IP-addresses as source-interface (at least with IOSs we're using):

ip tacacs source-interface

To use the IP address of a specified interface for all outgoing TACACS+ packets, use the ip tacacs source-interface command in global configuration mode. Use the no form of this command to disable use of the specified interface IP address.

ip tacacs source-interface subinterface-name

no ip tacacs source-interface

Syntax Description

subinterface-name

Name of the interface that TACACS+ uses for all of its outgoing packets.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: