Forum Discussion
Configure Radius/TACACS+ with Cisco ACS v 5.7
I don't think there are any port restrictions on the managment interface, especially port 49. If you want to test via telnet, from a CLI shell prompt you can do "telnet (tacacs-IP-addr) 49"
Based on how your routing is configured you may not be using the management interface to talk to the the TACACS server. If you do a tcpdump on all the interfaces, filtering on the IP address of your TACACS+ server, you would see what source IP address is being used. If it's not the management interface, you have a couple of options. You can either added management static routes for the TACACS server, or modify the TACACS server to accept connections from whatever IP address the BigIP is using.
Robert
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com