[c-nsp] tacacs+ an nexus 5010

Tom Lanyon tom at netspot.com.au
Wed Jul 1 04:09:12 EDT 2009


>> No, it should be right. My problem is that if I do a tcpdump on the  
>> tacacs+ server I dont see anything from the nexus.
>> It's like it doesn't leave the box at all.
>
> or is blocked elsewhere - check the network that the TACACS+
> traffic is being sent on and check ACLs etc that might be in the way
> on the way to the server. check firewall on server to ensure
> such traffic is allowed.  ping and telnet are okay but they
> wont test the actual method used.


... and are you using the correct 'ip tacacs source-interface' to  
source the traffic?


More information about the cisco-nsp mailing list