5

We have a handful of small business switches from cisco, model SF 302-08P. I'm trying to configure them for full tacacs support, however it appears that the model only supports tacacs for authentication, not for accounting.

Below is the version info and relevant configuration that I have so far. Any suggestions would be appreciated.

SW version    1.1.2.0 ( date  12-Nov-2011 time  23:34:26 )
Boot version    1.1.0.6 ( date  11-May-2011 time  18:31:00 )
HW version    V02
aaa authentication enable default tacacs enable
aaa authentication login default tacacs local
tacacs-server host 10.3.1.1 key redacted    priority 3
tacacs-server host 10.2.1.1 key redacted    priority 2
tacacs-server host 10.1.1.1 key redacted
  • 1
    AFAICT SG300 series switches only support tacacs authentication. Ref. Unrelated, but useful if you dont know; hopefully you got the 1.1 FW, which includes CDP support – Mike Pennington Dec 17 '13 at 20:01
3

Answering, so community will quit bumping this active...

We have a handful of small business switches from cisco, model SF 302-08P. I'm trying to configure them for full tacacs support, however it appears that the model only supports tacacs for authentication, not for accounting.

As of firmware version 1.3.7.18, you can configure tacacs accounting for login / logout; however, there is no support for per-command accounting listed in the user manual (ref: Cisco Sx300 Series Administration Guide, Version 1.3.7, chapter 21, pages 402-403).

0

You forgot:

aaa new-model

Try and see if that works.

  • 3
    These devices don't run a full version of IOS; I'm not even sure you could call it IOS. There's no aaa new-model on these devices. The authentication/authorization works fine, I just can't log commands via the accounting subsystem like I can through normal IOS. – Peter Grace Dec 17 '13 at 19:45
  • I'm sorry I couldn't be of more assistance :( – Lucas Kauffman Dec 17 '13 at 19:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.