I guess, I can fid that command, I've seen in doc also. But the config points
to mng vrf.
aaa group server tacacs+ REG_TAC
server xxx.xxxx.xxx.xxx
deadtime 5
use-vrf management
/Arne
-----Oprindelig meddelelse-----
Fra: Tom Lanyon [mailto:[email protected]]
Sendt: 1. juli 2009 10:09
Til: Arne Larsen / Region Nordjylland
Cc: cisco-nsp
Emne: Re: [c-nsp] tacacs+ an nexus 5010
>> No, it should be right. My problem is that if I do a tcpdump on the
>> tacacs+ server I dont see anything from the nexus.
>> It's like it doesn't leave the box at all.
>
> or is blocked elsewhere - check the network that the TACACS+ traffic
> is being sent on and check ACLs etc that might be in the way on the
> way to the server. check firewall on server to ensure such traffic is
> allowed. ping and telnet are okay but they wont test the actual
> method used.
... and are you using the correct 'ip tacacs source-interface' to source the
traffic?
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
