For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

hc_andy_35682's avatar
hc_andy_35682
Icon for Nimbostratus rankNimbostratus
Mar 03, 2010

Using TACACS+ on Big-IP LTM

Hi All,     I'm running BIG-IP LTM 6900 10.1.0.     I can't seem to get tacacs+ running for authentiation on the BIG-IP. I've followed the entry h...
config
design
Wintrode_61162's avatar
Wintrode_61162
Icon for Nimbostratus rankNimbostratus
Apr 14, 2011
Check the routing on the management interface.

 

 

Unsolicited traffic (like tacacs+) will be sourced from whatever IP has the lowest cost route to the destination. If you just have a default route configured on the mgmt interface, and a default route on the tmm side, the tacacs+ traffic will source from the TMM side interface (since TMM routes are lower cost than management). An easy way to test would be to create a host route on the management interface to the TACACS server and see if that resolves the problem.