Tacacs - System Login

General questions
, ,
1

Hi,

I configured TACACS in =

set system login tacacs

as bellow

set system login tacacs security-mode 'optional'
set system login tacacs server [...] key '[...]'
set system login tacacs source-address '192.168.1.251'
commit

Version Vyos =

Version:          VyOS 1.5-rolling-202312130023
Release train:    current

Built by:         autobuild@vyos.net
Built on:         Wed 13 Dec 2023 01:43 UTC
Build UUID:       ebe62d12-23c8-4566-9cf5-09eae32bdb62
Build commit ID:  8ce1ae8594f3ae

Architecture:     x86_64
Boot via:         installed image
System type:      VMware guest

Hardware vendor:  VMware, Inc.
Hardware model:   VMware Virtual Platform
Hardware S/N:     VMware-56 4d ca 93 7f 1f c2 d2-01 94 0d ca db 17 eb 42
Hardware UUID:    93ca4d56-1f7f-d2c2-0194-0dcadb17eb42

Copyright:        VyOS maintainers and contributors

The Login authentication stay on local, need help ?

2

OK work with a local login and tacas login with option optional.

But the i 've got a limited access

image

3

some ideas about TACACS, issue ?

4

It’s not noted in the TACACS section, but is noted in the RADIUS section, that without the priv-lvl=15 attribute/value in the response that the user does not have admin privileges. You also need the service=shell attribute/value pair.