Security

Reply
Regular Contributor I
Posts: 192
Registered: ‎03-27-2014

TACACS+ and ACS v4

I can configure TACASC+ in ACS v4?

Currently I have it configured, but it does not works.

Aruba
Posts: 1,540
Registered: ‎06-12-2012

Re: TACACS+ and ACS v4

Is this a question or comment. 

 

You will need to provide a lot more information.

 

Device

 

Name

Firmware

errors in device

 

CPPM 

 

Version

screen shots of errors in access tracker

 

ETC. 

 

TACACS 

 

Commands

 

ETC....

Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Regular Contributor I
Posts: 192
Registered: ‎03-27-2014

Re: TACACS+ and ACS v4

[ Edited ]

The conf in Controller:

 

aaa server-group "TACACS-SVR-GROUP"
auth-server TACACS-SERVER-A
!
aaa authentication-server tacacs "TACACS-SERVER-A"
host "X.X.X.X"
key XXXXXXXXXXXXX
tcp-port 4949
session-authorization
!
aaa authentication mgmt
server-group "TACACS-SVR-GROUP"
enable
!
aaa tacacs-accounting server-group TACACS-SVR-GROUP mode enable command all

 

The error in ACS:

 

 

service denied - service=aruba protocol=common

Moderator
Posts: 906
Registered: ‎07-29-2010

Re: TACACS+ and ACS v4

If you're stuck with TACACS+, a valid alternative might be using RADIUS. You can download Aruba VSAs for ACS from this link:

 

http://support.arubanetworks.com/ToolsResources/tabid/76/DMXModule/514/EntryId/115/Default.aspx

 

Regards

Samuel Pérez
ACMP, ACCP, ACDX#100

---

If I answerd your question, please click on "Accept as Solution".
If you find this post useful, give me kudos for it ;)
Regular Contributor I
Posts: 192
Registered: ‎03-27-2014

Re: TACACS+ and ACS v4

What add value?

Moderator
Posts: 906
Registered: ‎07-29-2010

Re: TACACS+ and ACS v4

If you want administration access you need to pass back to the controller the following: Aruba-Admin-Role = root

 

Samuel Pérez
ACMP, ACCP, ACDX#100

---

If I answerd your question, please click on "Accept as Solution".
If you find this post useful, give me kudos for it ;)
Search Airheads
Showing results for 
Search instead for 
Did you mean: