TACACs+ Servers Order

I want to create a rule that can validate the ordering of the TACACs+ servers on Cisco switches, e.g. the below is the correct order:

tacacs-server host 192.168.20.18
tacacs-server host 192.168.20.20
tacacs-server host 192.168.1.18

I want the rule to detect the wrong order and report it, example for the wrong order:

tacacs-server host 192.168.20.20
tacacs-server host 192.168.20.18
tacacs-server host 192.168.1.18

Any ideas how to configure such rule?

Find more posts tagged with

tacacs+

cisco

Accepted answers

sedmo

Try creating a regular expression rule that has this pattern and see if it does what you are looking for.

tacacs-server host 192.168.20.18.*\n(.*\n)*.*tacacs-server host 192.168.20.20.*\n(.*\n)*.*tacacs-server host 192.168.1.18

All comments

jswan

This is not possible in current releases. However, I have been told by SW that this kind of policy reporting is a high priority for future releases (with no expected dates attached, of course, per their usual policy).

sedmo

Try creating a regular expression rule that has this pattern and see if it does what you are looking for.

tacacs-server host 192.168.20.18.*\n(.*\n)*.*tacacs-server host 192.168.20.20.*\n(.*\n)*.*tacacs-server host 192.168.1.18