5

We have a handful of small business switches from cisco, model SF 302-08P. I'm trying to configure them for full tacacs support, however it appears that the model only supports tacacs for authentication, not for accounting.

Below is the version info and relevant configuration that I have so far. Any suggestions would be appreciated.

SW version    1.1.2.0 ( date  12-Nov-2011 time  23:34:26 )
Boot version    1.1.0.6 ( date  11-May-2011 time  18:31:00 )
HW version    V02
aaa authentication enable default tacacs enable
aaa authentication login default tacacs local
tacacs-server host 10.3.1.1 key redacted    priority 3
tacacs-server host 10.2.1.1 key redacted    priority 2
tacacs-server host 10.1.1.1 key redacted
1
  • 1
    AFAICT SG300 series switches only support tacacs authentication. Ref. Unrelated, but useful if you dont know; hopefully you got the 1.1 FW, which includes CDP support Commented Dec 17, 2013 at 20:01

2 Answers 2

3

Answering, so community will quit bumping this active...

We have a handful of small business switches from cisco, model SF 302-08P. I'm trying to configure them for full tacacs support, however it appears that the model only supports tacacs for authentication, not for accounting.

As of firmware version 1.3.7.18, you can configure tacacs accounting for login / logout; however, there is no support for per-command accounting listed in the user manual (ref: Cisco Sx300 Series Administration Guide, Version 1.3.7, chapter 21, pages 402-403).

0

You forgot:

aaa new-model

Try and see if that works.

2
  • 3
    These devices don't run a full version of IOS; I'm not even sure you could call it IOS. There's no aaa new-model on these devices. The authentication/authorization works fine, I just can't log commands via the accounting subsystem like I can through normal IOS. Commented Dec 17, 2013 at 19:45
  • I'm sorry I couldn't be of more assistance :( Commented Dec 17, 2013 at 19:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.