Configure Tacacs+ server on linux

blackyzereo — Thu, 19 Nov 2020 18:20:52 GMT

Hello,

i am configuring tacacs+ on VM-300, but there is no configure option "Device - Access Domain", so i think the VSA should be added into tacacs+ server config. These VSA are mention here,

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/authentication/authentication-types/tacacs.html#ida74c523c-3a49-47c1-a7eb-717efaf41eea

I am not familiar with tacacs+ config, so i don't know which should be added.

Please share your idea.

Thank you.

Re: Configure Tacacs+ server on linux

rmfalconer — Fri, 20 Nov 2020 01:25:37 GMT

I've set this up in ISE, not on a Linux server running tac+.

I found that I have to pass the first three attributes from that link: service, protocol and PaloAlto-Admin-Role. Each of these are set to type of Mandatory. Without all 3, it didn't work.

topic Configure Tacacs+ server on linux in General Topics

Configure Tacacs+ server on linux

Re: Configure Tacacs+ server on linux