Forum Discussion

VFB's avatar
VFB
Icon for Cirrus rankCirrus
Mar 09, 2016

CLI for tacacs

Hi all, I need some assistance in configuring tacacs via CLI. I have it configured via GUI on my test box but I have a bunch more devices I need to configure it on and rather script it. Thanks in advance

 

12 Replies

  • This should get you going

    tmsh create auth tacacs system-auth { protocol ip secret YourSecret servers add { ACSserver1 ACSserver2 } service ppp}

    • VFB's avatar
      VFB
      Icon for Cirrus rankCirrus
      Looks like what I had initially, but I noticed I had to go into the GUI to change the user directory to "Remote - Tacacs+", External Users to "Administrator" and Terminal access to "tmsh". Is this something that can be done in CLI as well?
    • Brad_Parker's avatar
      Brad_Parker
      Icon for Cirrus rankCirrus
      tmsh modify auth source type tacacs AND tmsh modify auth remote-user default-role admin remote-console-access tmsh
    • VFB's avatar
      VFB
      Icon for Cirrus rankCirrus
      Very close at this point. The only piece left is to change the user directory from Local to "Remote - TACACS+". The CLI still isn't straightforward with that piece of it.
  • This should get you going

    tmsh create auth tacacs system-auth { protocol ip secret YourSecret servers add { ACSserver1 ACSserver2 } service ppp}

    • VFB's avatar
      VFB
      Icon for Cirrus rankCirrus
      Looks like what I had initially, but I noticed I had to go into the GUI to change the user directory to "Remote - Tacacs+", External Users to "Administrator" and Terminal access to "tmsh". Is this something that can be done in CLI as well?
    • Brad_Parker_139's avatar
      Brad_Parker_139
      Icon for Nacreous rankNacreous
      tmsh modify auth source type tacacs AND tmsh modify auth remote-user default-role admin remote-console-access tmsh
    • VFB's avatar
      VFB
      Icon for Cirrus rankCirrus
      Very close at this point. The only piece left is to change the user directory from Local to "Remote - TACACS+". The CLI still isn't straightforward with that piece of it.