[c-nsp] 2900XL and TACACS+

[Jeff Chambers]

I would try c2900XL-h2s-mz-112.8.5-SA6.bin (notice "h2s" in the name)



I know c2900XL-h2s-mz-112.8.2-SA6.bin has TACACS+ support.


In this old code, these lines work.

"aaa authentication login default tacacs+ local"

"aaa authentication login default local"



This line does not work.

"aaa authentication login default local tacacs+"


Jeff Chambers.


-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net]On Behalf Of Brian Feeny
Sent: Tuesday, December 07, 2004 3:09 AM
To: Marty Adkins
Cc: 'cisco-nsp'
Subject: Re: [c-nsp] 2900XL and TACACS+



I have that code, but it doesn't look like TACACS+ is in there:

amsouth-switch1#show version
Cisco Internetwork Operating System Software
IOS (tm) C2900XL Software (C2900XL-HS-M), Version 11.2(8.6)SA6,  
MAINTENANCE INTERIM SOFTWARE
Copyright (c) 1986-1999 by cisco Systems, Inc.
Compiled Fri 10-Dec-99 14:47 by cchang
Image text-base: 0x00003000, data-base: 0x00211B54

ROM: Bootstrap program is C2900XL boot loader

amsouth-switch1 uptime is 6 days, 12 hours, 9 minutes
System restarted by reload
System image file is "flash:c2900XL-hs-mz-112.8.6-SA6.bin", booted via


cisco WS-C2924-XL (PowerPC403GA) processor (revision 0x11) with  
4096K/640K bytes of memory.
Processor board ID 0x07, with hardware revision 0x00
Last reset from warm-reset

Processor is running Enterprise Edition Software

amsouth-switch1(config)#aaa authorization network local ?
   if-authenticated  Succeed if user has authenticated.
   none              No authorization (always succeeds).
   <cr>
amsouth-switch1(config)#tac?
% Unrecognized command

I read some docs too that eluded that this version would have TACACS+,  
but it doesn't seem to be there.

Brian



On Nov 30, 2004, at 3:45 PM, Marty Adkins wrote:

> Brian Feeny wrote:
>> Does any IOS version allow the 2900XL (4MB) to use TACACS+?
>> cisco WS-C2924-XL (PowerPC403GA) processor (revision 0x11) with   
>> 4096K/640K bytes of memory.
>> Processor board ID 0x07, with hardware revision 0x00
>> Last reset from warm-reset
>> I loaded enterprise 11.2 and didn't see it, but I would suspect that   
>> surely some image supported TACACS+
> Support for the 4MB XLs ended with the 11.2(8.x)SA6 train.  It  
> supports TACACS+
> but not the later AAA.  It does require the enterprise edition:
> http://www.cisco.com/univercd/cc/td/doc/product/lan/c2900xl/29_35sa6/ 
> eescg/mascupf.htm
>
> - Marty
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
---------------------------------------------
Brian Feeny, CCIE #8036, CISSP
Network Engineer
ShreveNet Inc.

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/