2 Replies Latest reply on May 30, 2018 8:50 AM by atkinsd

    Job to change from Radius to TACACS+ authentication

    atkinsd

      Good morning,

       

      I am trying to create a script that will allow me to add TACACS + configurations as well as a couple clean up commands.  This is pretty much the standard script for most of our devices.  I know the modifications are correct but how do I place them in a job to do all Cisco devices.  This will assist in doing the bulk of my changes and then I can do the 40 or so in a different job.

       

      tacacs server ise-1

      address ipv4 10.x.x.x

      key *

      tacacs server ise-2

      address ipv4 10.x.x.x

      key *

      tacacs-server directed-request

       

       

      aaa group server tacacs+ ISE-config

      server name ise-1

      server name ise-2

       

      exit

       

      !

      aaa authentication login default group ISE-config local

      aaa authentication login CONSOLE local

      aaa authorization exec default group ISE-config local

       

      no radius server radius1

      no radius server radius2

       

      no ip radius source-interface Vlan1

      ip tacacs source-interface Vlan1

       

      Dwane