I need to verify if 50 of our switches have the secondary tacacs server command added. Is this possible without having a baseline template\config?
Thanks
Hi keevern,
You can do it by creating an appropriate policy rule. See compliance/policy reports.
Regards,
Jiri
I will take a look at the compliance/policy reports. Thanks
There's 2 things you can look at depending on how old or new your code is.
The easiest rule to implement is to look for the existence of a line that reads "tacacs-server host ______" with the IP of your 2nd tacacs server in there.
Another rule to try is to look for a config block. That config block would start with the string "aaa group server tacacs+" and the end of the block would be a single exclamation point. You would want the rule to ensure that the specified config block contains the string "server ____" with the IP of your tacacs server in that string.
Thanks for your help. I now have a report!!