- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
01-06-2014 03:51 AM
Is there any method to configure the source address of Tacacs packets generated on our controller ( OS 6.1.1.0 ) Ideally we would like to use the loopback address.
Many Thanks
Mike
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
01-06-2014 03:52 AM - edited 01-06-2014 03:54 AM
There is currently no way to configure the TACACS source interface.
It tends to use the VLAN interface that is in the same subnet as the loopback address.
| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
Re: Tacacs source address
01-06-2014 05:03 AM
Many thanks for the reply much appreciated - our testing tends to confirm your statement and the Tacacs source address seems to be the the egress SVM and not the loopback.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
Re: Tacacs source address
01-06-2014 05:03 AM
Please submit a feature request on the idea portal if you'd like to see this feature.
| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
Re: Tacacs source address
01-06-2014 07:25 AM
What would the controller use if no loopback address is configured? the "controller-ip" configured address?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
Re: Tacacs source address
01-06-2014 07:50 AM
I'm not 100% on this but we've seen it use the lowest IP address of any interface.
| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
Re: Tacacs source address
01-07-2014 12:45 AM
I have added a new post to the Idea Portal requesting the ability to configure the source address use to craft Tacacs packets on the controller - once again thanks for all the replies regarding this!
Regards
Mike
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator
Re: Tacacs source address
10-06-2017 10:39 AM
This feature is enabled starting from 6.5.2 code. Check this http://www.arubanetworks.com/techdocs/ArubaOS_6_5_3_X_Web_Help/Content/ArubaFrameStyles/1CommandList/aaa_authentication_serve3.htm
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Alert a Moderator