I stumbled across the exact same problem and asked Cisco about it. Their
response was TACACS is not present in IP-only images and I would need IP Plus.
At that point, I dropped the issue because the 801 in question didn't have
sufficient RAM/flash to go there and I couldn't have it upgraded.
I told the Cisco rep I thought it was a bug that should be fixed (that the
options were present but broken), but I don't think it got reported and
obviously it didn't get fixed if it's in 12.2.1.
Jason Young
CNS - Network Design, Anheuser-Busch
(314)577-4597
> -----Original Message-----
> From: Stefan M. Brandl [mailto:smb@r-kom.de]
> Sent: Wednesday, June 27, 2001 9:55 AM
> To: cisco-nsp@puck.nether.net
> Subject: [nsp] C800 and tacacs
>
>
> Hi,
> I want to authenticate telnet-access to our Cisco 801 via tacacs+.
> We already do this on our 1600, 1700 and 7200 Series Router and it
> works perfect, but I can't get it running on our 801s.
> The Cisco just doesn't query the tacacs-server.
> If I do a telnet to the router, I get the following msg. on
> the console:
>
> *Mar 1 00:09:28: %AAAA-3-BADREG: Illegal registry call.
> -Traceback= FFEAC 109258 12B9F8 12C5DC 15CA00 321DC
>
>
> I tried dieferent IOS, including 12.1.9 and 12.2.1.
>
> Is this a known problem or am I doing something wrong?
> Here my config:
>
> !
> aaa new-model
> aaa authentication login default group tacacs+ line
> aaa authentication enable default group tacacs+ enable
> aaa authorization exec default group tacacs+ none
> aaa accounting exec default start-stop group tacacs+
> aaa accounting commands 15 default start-stop group tacacs+
> !
> tacacs-server host x.x.x.x key xxxxxxx
> !
>
>
> Regards
> Stefan
> --
> Stefan M. Brandl
> R-KOM GmbH & Co. KG
> E-Mail: smb@r-kom.de
> Greflingerstr. 26
> PGP-Key available at http://www.smbnet.de/pgpkey.php3
> 93055 Regensburg
>
This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:43 EDT