- Community Home
- >
- Networking
- >
- Switching and Routing
- >
- Comware Based
- >
- Tacacs issue on A5120 sw R2220P01/R2220P02
Categories
Company
Local Language
Forums
Discussions
Knowledge Base
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Knowledge Base
Forums
Discussions
- Cloud Mentoring and Education
- Software - General
- HPE OneView
- HPE Ezmeral Software platform
- HPE OpsRamp
Knowledge Base
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-04-2013 07:43 AM
07-04-2013 07:43 AM
Tacacs issue on A5120 sw R2220P01/R2220P02
Hello.
This is driving me nuts - has anybody else encountered this :
I use the same configuration for tacacs as in a A5820, and that works fine.
In the A5120-EI, I can log in with tacacs credentials exactly one time after
reboot. Any later attempts only lets me use local defined user, but takes
a very long time to let me in.
I have so far tested this behaviour on two different switches.
hwtacacs scheme tacacscf
primary authentication x.y.z.127
secondary authentication x.y.z..128
primary authorization x.y.z.127
secondary authorization x.y.z..128
primary accounting x.y.z.127
secondary accounting x.y.z..128
key authentication cipher<secret>
key authorization cipher <secret>
key accounting cipher <secret>
user-name-format without-domain
domain system
authentication login hwtacacs-scheme tacacscf local
authorization login hwtacacs-scheme tacacscf local
accounting login hwtacacs-scheme tacacscf local
access-limit disable
state active
idle-cut disable
self-service-url disable
user-interface vty 0 15
authentication-mode scheme