Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Tacacs config on WAAS device

All,

we have tried to configure AAA on WAAS (Wide Area Application Services)device. we have applied all the aaa commands on waas device and made necessary configs changes on tacacs server as well.

WAAS device is speaking to tacacs server and I am able to login to waas device through tacacs id, the problem here is when i tried to go to enable mode on waas device its not accepting my tacacs password instead its taking local password.

I am sure i am missing something here, can any one throw some lights here to solve this issue as this is very ciritcal activity for me.

Many thanks in advance and pasted AAA configs applied on WAAS device.

authentication login tacacs enable primary

authentication login local enable secondary

authentication configuration tacacs enable primary

authentication configuration local enable secondary

aaa accounting commands 15 default start-stop tacacs

tacacs host **.**.**.* primary

tacacs key ******

Regards,

Gopal

7 REPLIES

Re: Tacacs config on WAAS device

Hi

u need to add the below line in u r config

aaa authentication enable default group tacacs+

Thanks

Mahmood

Community Member

Re: Tacacs config on WAAS device

Hi Mahmood,

Thanks for your reply, I have applied the given command and its not accepting.

Its Cisco WAAS router ruuing below ios.

Cisco Wide Area Application Services Software (WAAS)

Copyright (c) 1999-2007 by Cisco Systems, Inc.

Cisco Wide Area Application Services Software Release 4.0.13 (build b23 Sep 8 2007)

Version: oe7341-4.0.13.23

Compiled 18:41:02 Sep 8 2007 by cnbuild

System was restarted on Sat Apr 12 13:49:26 2008.

The system has been up for 5 weeks, 6 days, 20 hours, 37 minutes, 16 seconds.

Regards,

Gopal

Re: Tacacs config on WAAS device

Hi

can u try this

authentication enable tacacs enable primary

Thanks

Mahmood

Re: Tacacs config on WAAS device

Hi

can u try this

authentication enable tacacs enable primary

Thanks

Mahmood

Community Member

Re: Tacacs config on WAAS device

Yes, tried this. Nothing is working.

Regards,

Gopal

Hall of Fame Super Gold

Re: Tacacs config on WAAS device

Gopal

Pretty clearly the problem is that it is requiring the local enable password because there is no configuration in aaa for authenticating enable. So we need to find the correct syntax to use. Can you post the output that you get from online help?

- go into config mode.

- type aaa authentication enable ?

- if it shows default as an option then type

aaa authentication enable default ?

Perhaps this will help us figure what syntax it is looking for.

HTH

Rick

Community Member

Re: Tacacs config on WAAS device

Hi Rick,

i am able to login via Telnet but unable to login via GUI.

Gopal

357
Views
0
Helpful
7
Replies
CreatePlease to create content