IP Addresses to use when adding NAS

[r.cheung]

Hello. I am running CiscoACS ver 2.6. When adding a NAS for AAA against this server, I have to input the IP address of its serial interface, and not anything else such as the loopback, or the fastethernet. Is this behavior normal? It would be nice to use the loopback address for multi homed hosts. Thanks.

[tepatel]

Typically NAS ip address in AAA will be ip address of an interface of NAS on which you can reach the aaa server. Because from that ip address all the AAA packets will be sourced..Now you can use the other interface ip address as NAS ip address in aaa(such as loopback interface of a router)but you need to inform the router to source the aaa packets from that ip address by entering this command

ip radius source-interface

OR for tacacs

ip tacacs source-interface

Just make sure that you can ping AAA server from that ip address first.