Brocade VDX - TACACS

[pawarpavan]

Hello Experts,

I'm configuring the TACACS+ on the VDX switch and I was able to configure 'aaa authentication and aaa accounting' but did not find an option to configure authorization even though I have configured the tacacs+ host. 

extreme01# show running-config tacacs-server

tacacs-server host 10.128.64.148 use-vrf mgmt-vrf

key "W04/vBJigwC0HIB1wvPEuHkqAboiDhOa9rYs+fyZiTU=\n"

encryption-level 7

retries 3

!

extreme01(config)# aaa ?

Possible completions:

  accounting       Configure Login or Command accounting

  authentication   Configure preferred order for Authentication

extreme01(config)# aaa

Is authorization not supported on the version I'm running on VDX?

SW - 7.3.0aa (NOS)

HW - BR-VDX6740

-Pavan

[Michael_Morey · Accepted solution]

Pavan,

I see that you have not received a response on this question that was posted some time ago.  I looked into our documentation and I see instruction in the 7.3.0 security guide on setting up aaa authorization, however no such reference in the command reference guide.  I also am not seeing an option to configure it in my lab.  Looking into our Release notes I do not see any mention of support for aaa authorization in 7.3.0.

I then checked my internal training and the old road maps for NOS and It looks like aaa authorization was introduced in 7.4.0.  I then checked the security guide, command reference, and release notes and they all show that this feature was implemented in 7.4.0.  

Additionally I upgraded my lab to 7.4.0 and have no issues configuring the feature:

sw0# show ver

Network Operating System Software
Network Operating System Version: 7.4.0
Copyright (c) 2017-2018 Extreme Networks, Inc.
Firmware name: 7.4.0
Build Time: 07:56:38 Apr 25, 2019
Install Time: 16:16:00 Sep 20, 2023
Kernel: 2.6.34.6

BootProm: 1.0.1
Control Processor: e500mc with 4096 MB of memory

Slot Name Primary/Secondary Versions Status
---------------------------------------------------------------------------
SW/0 NOS 7.4.0 ACTIVE*
7.4.0
SW/1 NOS 7.4.0 STANDBY
7.4.0

sw0# show run tac
tacacs-server host 10.26.145.65 use-vrf mgmt-vrf
key "Onmdq0+mhjBP990VmLGS9Q==\n"
encryption-level 7
!
sw0# conf
Entering configuration mode terminal
sw0(config)# aaa ?
Possible completions:
accounting Configure Login or Command accounting
authentication Configure preferred order for Authentication
authorization Enable/Disable Command authorization
sw0(config)# aaa authorization ?
Possible completions:
command Order of sources for authorization (default='none')
sw0(config)# aaa authorization