5

We have a handful of small business switches from cisco, model SF 302-08P. I'm trying to configure them for full tacacs support, however it appears that the model only supports tacacs for authentication, not for accounting.

Below is the version info and relevant configuration that I have so far. Any suggestions would be appreciated.

SW version    1.1.2.0 ( date  12-Nov-2011 time  23:34:26 )
Boot version    1.1.0.6 ( date  11-May-2011 time  18:31:00 )
HW version    V02

aaa authentication enable default tacacs enable
aaa authentication login default tacacs local
tacacs-server host 10.3.1.1 key redacted    priority 3
tacacs-server host 10.2.1.1 key redacted    priority 2
tacacs-server host 10.1.1.1 key redacted
Improve this question
1
  • 1
    AFAICT SG300 series switches only support tacacs authentication. Ref. Unrelated, but useful if you dont know; hopefully you got the 1.1 FW, which includes CDP support
    – Mike Pennington
    Dec 17, 2013 at 20:01

2 Answers 2

Reset to default
3

Answering, so community will quit bumping this active...

We have a handful of small business switches from cisco, model SF 302-08P. I'm trying to configure them for full tacacs support, however it appears that the model only supports tacacs for authentication, not for accounting.

As of firmware version 1.3.7.18, you can configure tacacs accounting for login / logout; however, there is no support for per-command accounting listed in the user manual (ref: Cisco Sx300 Series Administration Guide, Version 1.3.7, chapter 21, pages 402-403).

Improve this answer
0

You forgot:

aaa new-model

Try and see if that works.

Improve this answer
2
  • 3
    These devices don't run a full version of IOS; I'm not even sure you could call it IOS. There's no aaa new-model on these devices. The authentication/authorization works fine, I just can't log commands via the accounting subsystem like I can through normal IOS.
    – Peter Grace
    Dec 17, 2013 at 19:45
  • I'm sorry I couldn't be of more assistance :(
    – Lucas Kauffman
    Dec 17, 2013 at 19:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.