Smart questions
Smart answers
Smart people
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Member Login

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips now!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

Join Tek-Tips
*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

LINK TO THIS FORUM!

Add Stickiness To Your Site By Linking To This Professionally Managed Technical Forum.
Just copy and paste the
code below into your site.

Partner With Us!

"Best Of Breed" Forums Add Stickiness To Your Site
Partner Button
(Download This Button Today!)

Feedback

"...I think the forum is a great idea, especially for those of us in consulting engineering. Keep up the good work!..."

Geography

Where in the world do Tek-Tips members come from?
nix45 (MIS)
23 Dec 03 12:05
Is it possible to authenticate users dialing into the D56 from Cisco ACS 3.1 server via RADIUS?  My problem sounds very similar to this post...

Thread563-658459 that post, someone mentioned that they needed to change the RADIUS port numbers to something else, but didn't specify which port numbers.  I ran a utility called 'fport' on the ACS server and found that the CSRadius.exe process is bound to 5 UDP ports: 1645, 1646, 1812, 1813, and 2794.  I tried setting up the D56 to use each of those 5 ports, but it doesn't work.

I also tried using TACACS+ (default TCP port 49) but that didn't work either.  I don't see anything in any of the logs.

Any idea's on how to go about setting this up?     

Thanks,
Chris
nix45 (MIS)
23 Dec 03 14:28
I got this working with TACACS+.  I'm not going to get too into any details here because no one really uses Shiva stuff anymore, but just in case someone cares...

In ACS, I set up a AAA client using TACACS+ and entered a shared key called 'password'.  I also set up TACACS+ in ACS to authenticate against our  Active Directory network.  

In D56, under Configuration - Security, I select TACACS, added the IP of our ACS server, left the default TCP port 49 as is, and entered the key 'password'.  

HTH

Chris

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close