Release 1.0

System Administration Commands

 

 

ip tacacs source-interface

The ip tacacs source-interfacecommand allows an operator to control the source IP address of TACACS+ packets generated by the BSR by specifying an Ethernet or loopback interface as the source IP address for TACACS+ packets. The normal convention for generated TACACS+ packets is to set the source IP address equal to the IP address of the outgoing interface. The ip tacacs source-interfacecommand overrides this convention and instead uses the IP address of a specified Ethernet or loopback interface. This command facilitates the use of one IP address entry associated with the TACACS+ client instead of maintaining a list of all IP addresses and is useful in cases where the a router has many interfaces and an operator wants to ensure that all TACACS+ packets from a particular router have the same IP address.

The no ip tacacs source-interfacecommand removes the specified source interface.

Note: Before using the ip tacacs source-interface command, the interface must be configured, assigned an IP address, and up and running. Any configuration change with this command will not take effect until after the next BSR connection attempt.

Group Access

System Administrator

Command Mode

Global Configuration

Command Line Usage

ip tacacs source-interface {ethernet <X/Y> loopback <1-64>}no ip tacacs source-interface

Command Syntax

ethernet X/Y

X is 0; Y is the port number

loopback 1-64

the loopback interface number

526363-001-00 Rev. B

MGBI

1-55

Page 91
Image 91
Motorola BSR 2000 manual Ip tacacs source-interface, Ethernet X / Y, Loopback