ExtremeSwitching (EXOS)

 View Only
  • 1.  CONFIGURING TACACS+ SOLUTION ON EXTREME SWITCH

    Posted 30 days ago
    Dears, 

    i need a solution to configure an authentication server on an extreme switch BD-8806

    Here is my script , it not working and i keep getting authentication denied when i tried login in to the switch 

    TACACS+ CONFIGURATION
    # This is the key that clients have to use to access Tacacs+

    key = test123

    ###THIS WAS MEANT TO WORK FOR EXTREME NODE###
    user = stef {
    member = admingroup
    login = cleartext extreme
    service = Extreme-XMC-Auth {
    local-user-name = remote-su

     }
    }

    SWITCH CONFIGURATION

    configure tacacs primary server 10.17.21.196 49 client-ip 10.10.8.5 vr VR-Default
    configure tacacs primary shared-secret encrypted "test123"
    enable tacacs
    enable tacacs-authorization


    Above are my script , i need a solution that works


  • 2.  RE: CONFIGURING TACACS+ SOLUTION ON EXTREME SWITCH
    Best Answer

    Posted 30 days ago
    Edited by Sam Pirok 24 days ago
    Hi,

    When you use the "encrypted" keyword it is expecting an encrypted string that it needs to decrypt. 

    Can you change it to this?
    configure tacacs primary shared-secret test123​
    EXOS always encrypts credentials so it will show in the configuration like this:

    configure tacacs primary shared-secret encrypted "#$bb+3R99U8zhsAGv7ZykeGacBRVU9nA=="​

    Thanks,
    Chris Thompson



  • 3.  RE: CONFIGURING TACACS+ SOLUTION ON EXTREME SWITCH

    Posted 20 days ago
    Thank you Chris,

    Issue resolved .