topic RE: Tacacs+ Server Setting, Admin Setting? in ExtremeSwitching (EXOS/Switch Engine)

Tacacs+ Server Setting, Admin Setting?

EtherNation_Use — Wed, 08 Jan 2014 08:51:00 GMT

Create Date: Apr 17 2013 1:53PM

Hi,

we have a X670-48x with version 15.2.2.7 in the field.
We made our Authentication whit a tacacs-server, the settings a work fine.
But when we logged in the switch we dont have admin rights,
what we need for variabels send from the tacacs-server to the switch to give the
users admin rights. Or give it any other way to make the tacacs-user to an admin after there
is logged into the switch?

best regards
mp (from mp)

RE: Tacacs+ Server Setting, Admin Setting?

EtherNation_Use — Wed, 08 Jan 2014 08:52:00 GMT

Create Date: Apr 18 2013 1:21PM

No one any idea? (from mp)

RE: Tacacs+ Server Setting, Admin Setting?

EtherNation_Use — Wed, 08 Jan 2014 08:52:00 GMT

Create Date: Apr 29 2013 4:03PM

We have found the answer.

Give the Tacacs-User on the Tacacs-Server privileg 15, thats it.
Now all User from Tacacs-Server are Admins.

Now i have a new Problem, we want to create a single User (admin) were ist not authenticate over Tacacs, is this possible?

At the moment we can create a User on the switch but this users are not working so long the Tacacs is enable!?

best regards
mp (from mp)

RE: Tacacs+ Server Setting, Admin Setting?

Nick_M — Fri, 25 Apr 2014 03:09:00 GMT

I am using TACACS+ Server for Windows by TACACS.net on the Extreme EXOS (BlackDiamond or 440 series switches). I was able to to get my server and switch to authenticate and when log in come up in enable mode.

Remember on the authoriztion.xml to add the follow:

EXTREME_EXOS

priv-lvl=15 <------------- this is what allows it to log in with enable.

.*

http://www.filedropper.com/authentication
http://www.filedropper.com/authorization
http://www.filedropper.com/clientstxt