10-May-2023 12:26
We ran into issues deploying rSeries and VELOS platforms on the network at our company using a custom form of TACACS+. Our implementation allows for application-specific domains with unique ports and keys.
We had issues with it until we added the attribute value pairs to the TACACS+ domain profiles:
Admin (unlimited_config):
F5-F5OS-UID=1001
F5-F5OS-GID=9000
Operator (unlimited_enable):
F5-F5OS-UID=1001
F5-F5OS-GID=9001
This change resolved the access issues via GUI and we are able to access using our TACACS+ credentials, but it does NOT work via CLI for access using the same credentials. We already have a case out to F5 about this, but I was wondering if anyone else is experiencing the same implementation challenge on accessing CLI using TACACS+.
10-May-2023 13:32
Hi @jdclay thanks for the share. I don't have help for you on this but am interested in the outcome...
16-May-2023 21:35
@jdclay - FYI I'm featuring your post in today's Community Highlights article to boost visibility for you.