[tac_plus] TACACS+ with Aruba Wireless Controller

[John Payne]

On Nov 29, 2010, at 1:32 PM, Steven Goto wrote:

> Hi tac_plus,
> 
> I've been trying to get our Aruba wireless controller running ArubaOS 3.4.2.5 to work with the Shrubbery Networks TACACS+ server for a number of weeks now;  I've been going back and forth with Aruba Support but I think I've gone as far as I can go with them since they have no solution.  TACACS+ accounting works but the authentication doesn't;  Wireshark captures show the authentication failing and there are no service names or role definitions (like for AirWave AMP from tacacs.org, which we are successfully using) that Aruba is aware of.  Are there any tips you may have for getting TACACS+ authentication to work with the Aruba wireless controller?  Thanks!

Authentication works for me, but not straight to enable mode :(

I have a number of Aruba WCs on different versions, but none on 3.4.2.5 :)  The closest is 3.4.2.0:


aaa tacacs-accounting server-group TACACS  mode enable command all

aaa authentication-server tacacs "server1"
  host 10.1.2.3
  key foo

aaa server-group "TACACS"
  auth-server server1

aaa authentication mgmt
   server-group "TACACS"
   enable