mgmt_vrf_namespace_tacacs: Tacacs enhancement on top of namespace sol… #428
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…ution for management vrf
|
no more valid |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
- What I did
Enhanced the configuration for using --use-mgmt-vrf for tacacs server configuration on top of namespace based solution for management VRF.
- How I did it
Added checks for vrf and set the variable to "mgmt" if management VRF is enabled, else use "None". There is no change in the command syntax. Its just the value that is being passed for non-mgmt-vrf and for mgmt-vrf.
- How to verify it
(a) mgmt_vrf_namespace: management vrf using namespace solution sonic-buildimage#2405
(b) mgmt_vrf_namespace: management vrf using namespace solution #422.
Checkout this file aaa.py along with the files/image_config/hostcfgd/hostcfgd PR.
With all these files, enable mgmt vrf using command "config vrf add mgmt" and configure tacacs client using following commands.
(a) config aaa authentication login tacacs+
(b) config tacacs authtype login
(c) config tacacs passkey testing123
(d) config tacacs add --use-mgmt-vrf serveripaddress
Configure the tacacs server accordingly.
Then, do SSH to the device and verify that the user is authenticated using tacacs server via the management VRF port eth0.