Switches, Hubs, and Modems
Showing results for 
Search instead for 
Did you mean: 

TACACS+ on 4100gl question

Go to solution
Stuart Teo
Trusted Contributor

TACACS+ on 4100gl question

I have my 4100gl setup as follow:

Telnet=TACACS+, Secondary=Local
Enable=TACACS+, Secondary=Local

When I did a telnet, I authenticated fine and logged on as OPERATOR.

When I tried an enable, the same userid/password didn't want to work.

Is it a Procurve limitation or a TACACS+ limitation?
If a problem can be fixed, there's nothing to worry. If a problem can't be fixed, worrying ain't gonna help. Bottom line: don't worry.
Gonzo Granello
Valued Contributor

Re: TACACS+ on 4100gl question

ther is an option in the TACACS server that need to be set to allow "enable" otherwise the server will not authenticate that user. This is a extra security measure to prevent open doors since without that option anyone authenticated could configure the switch. That also means this is neither a ProCurve nor a TACACS limitation. It's really a feature.

most time the day i have to mask my contempt for the a-holes in charge......