Acme Packet 4500
 

PLA-Support>Sun Systems>CommsGBU>Session Delivery Network>SN-SND: Acme Service Provider
 

Unable to add TACACS server

In this Document

Symptoms

Changes

Cause

Solution

Created from <SR 3-17331174011>

Applies to:

Symptoms

 After completing the change user is not able to see new TACACS details on path conft-->security-->authentication-->TACACS server--> show.

1.Enable TACACS+ Client Services

ACMEPACKET# configure terminal
ACMEPACKET(configure)# security
ACMEPACKET(security)# authentication
ACMEPACKET(authentication)# type tacacs
ACMEPACKET(authentication)# tacacs-authorization enabled
ACMEPACKET(authentication)# tacacs-accounting enabled
ACMEPACKET(authentication)# management-strategy roundrobin
ACMEPACKET(authentication)# done

2.Specify TACACS+ Servers

ACMEPACKET# configure terminal
ACMEPACKET(configure)# security
ACMEPACKET(security)# authentication
ACMEPACKET(authentication)# tacacs-servers
ACMEPACKET(tacacs-servers)# address XX.XX.XX.XX.XX
ACMEPACKET(tacacs-servers)# port 49
ACMEPACKET(tacacs-servers)# state enabled
ACMEPACKET(tacacs-servers)# authentication-methods all
ACMEPACKET(tacacs-servers)# secret XXXXXXXXX
ACMEPACKET(tacacs-servers)# dead-interval 120
ACMEPACKET(tacacs-servers)# done

ACMEPACKET(tacacs-servers)# management-servers (XXXXXXXX)
ACMEPACKET(tacacs-servers)#

After this they fail to see the TACACS Servers .

And on trying again they were getting below error -

Error 409 saving configuration AuthConfig
Object with the same key value already exists

Changes

Cause

 User was saving the configuration without giving a select

Solution

 To save the configuration and get rid of 409 error , please do a "select" and then done . 

Here I am getting error when I am saving without giving a select -
**AmitM-HD-ETC(authentication)# done
% Error 409 saving configuration AuthConfig
Object with the same key value already exists

**AmitM-HD-ETC(tacacs-servers)# authentication-methods all
**AmitM-HD-ETC(tacacs-servers)# done
tacacs-servers
address 10.138.224.155
port 49
state enabled
secret ********
realm-id
dead-time 120
authentication-methods all

**AmitM-HD-ETC(tacacs-servers)# exit
**AmitM-HD-ETC(authentication)# done
% Error 409 saving configuration AuthConfig
Object with the same key value already exists
**AmitM-HD-ETC(authentication)# quit
Save Changes [y/n]?: y
% Error 409 saving configuration AuthConfig
Object with the same key value already exists
**AmitM-HD-ETC(authentication)# select -----------> do a select first
NOTE: You will lose unsaved data.

Do you still want to select a new object [y/n]?: y
**AmitM-HD-ETC(authentication)# done ----------------> do a done
authentication
source-port 1812
type local
protocol pap
tacacs-authorization enabled
tacacs-authorization-arg-mode disabled
tacacs-accounting enabled
server-assigned-privilege disabled
allow-local-authorization disabled
login-as-admin disabled
management-strategy hunt
ike-radius-params-name
management-servers
last-modified-by admin@10.184.61.38
last-modified-date 2018-04-23 06:03:01

**AmitM-HD-ETC(authentication)# exit

**AmitM-HD-ETC(security)# exit
**AmitM-HD-ETC(configure)# exit
**AmitM-HD-ETC# save
checking configuration
Save-Config received, processing.
waiting for request to finish
Request to 'SAVE-CONFIG' has Finished,
Save complete
Currently active and saved configurations do not match!
To sync & activate, run 'activate-config' or 'reboot activate'.
*AmitM-HD-ETC# activate-config
Activate-Config received, processing.
waiting for request to finish
Request to 'ACTIVATE-CONFIG' has Finished,
Activate Complete

Now this way you would be able to save the configuration .

***********************

When you give "no" under authentication , it will delete radius settings as well .

This solution has no attachment