[c-nsp] TACACS+ exec authorisation no working on Cisco 2960CG

Peter Rathlev peter at rathlev.dk
Wed Jul 30 15:40:59 EDT 2014


On Wed, 2014-07-30 at 15:15 -0400, Andrew Wentzell wrote:
> On Wed, Jul 30, 2014 at 3:01 PM, Rich Lewis <RLewis at sis.tv> wrote:
> > And if so, is there a way (that people are happy implementing) to
> > get TACACS+ without buying Cisco ACS or ISE? (Don't expect you to
> > answer this bit Javier! ;-)
> 
> tac_plus works well for me. It's free, stable, and not-a-headache to
> use.
> 
> http://shrubbery.net/tac_plus/

+1. Very good value for money. :-)

We use an "after auth" script as command audit log since the accounting
log is hard on the eyes. This also gives us an easy place to
insert/replace commands globally for all our devices.

-- 
Peter




More information about the cisco-nsp mailing list