topic RE: CONFIGURING TACACS+ SOLUTION ON EXTREME SWITCH in ExtremeSwitching (EXOS/Switch Engine)

CONFIGURING TACACS+ SOLUTION ON EXTREME SWITCH

ola — Tue, 19 Jul 2022 11:58:00 GMT

Dears,

i need a solution to configure an authentication server on an extreme switch BD-8806

Here is my script , it not working and i keep getting authentication denied when i tried login in to the switch

TACACS+ CONFIGURATION
# This is the key that clients have to use to access Tacacs+

key = test123

###THIS WAS MEANT TO WORK FOR EXTREME NODE###
user = stef {
member = admingroup
login = cleartext extreme
service = Extreme-XMC-Auth {
local-user-name = remote-su

}
}

SWITCH CONFIGURATION

configure tacacs primary server 10.17.21.196 49 client-ip 10.10.8.5 vr VR-Default
configure tacacs primary shared-secret encrypted "test123"
enable tacacs
enable tacacs-authorization

Above are my script , i need a solution that works

RE: CONFIGURING TACACS+ SOLUTION ON EXTREME SWITCH

CThompsonEXOS — Tue, 19 Jul 2022 15:51:00 GMT

Hi,

When you use the "encrypted" keyword it is expecting an encrypted string that it needs to decrypt.

Can you change it to this?

configure tacacs primary shared-secret test123

EXOS always encrypts credentials so it will show in the configuration like this:

configure tacacs primary shared-secret encrypted "#$bb+3R99U8zhsAGv7ZykeGacBRVU9nA=="

Thanks,
Chris Thompson

RE: CONFIGURING TACACS+ SOLUTION ON EXTREME SWITCH

ola — Fri, 29 Jul 2022 13:39:00 GMT

Thank you Chris,

Issue resolved .