Can TACACS config interfere with EIGRP?

flipmadflipmad Posts: 184Member
I have enabled TACACS aaa model on one of the routers and EIGRP is not peering with it. I have 2 other routers peering with this router, and 2 others with aaa and the 2 running aaa will not peer.

Comments

  • networker050184networker050184 Posts: 11,962Mod Mod
    It shouldn't interfere. Post some configs up and let us see what you are working with.
    An expert is a man who has made all the mistakes which can be made.
  • flipmadflipmad Posts: 184Member
    It shouldn't interfere. Post some configs up and let us see what you are working with.

    I am just awaiting the config on the remote routers. As soon as I get it I will post it up. Thanks man
  • networker050184networker050184 Posts: 11,962Mod Mod
    Nothing jumps out at me as wrong. I'm assuming these are both plugged into a switched network? Can they ping each others LAN interface? If not double check VLAN assignments.
    An expert is a man who has made all the mistakes which can be made.
  • flipmadflipmad Posts: 184Member
    ironically the routers can ping eachother. My only concern is the aaa is somehow interfering.

    We are going to have further engineering discussions. Once we figure it out i will definitely let you know.

    by the way, i appreciate your feedback in the forums over the years. you have always been a reliable reference in these forums.
  • mikej412mikej412 Posts: 10,090Member
    blake15 wrote: »
    I have 2 other routers peering with this router, and 2 others with aaa and the 2 running aaa will not peer.
    Are any of those routers also running VPN tunnels?

    Is this production (real hardware) or lab (real hardware or simulator/emulator)?

    If this is a lab, try the debug ip routing command.
    :mike: Cisco Certifications -- Collect the Entire Set!
  • networker050184networker050184 Posts: 11,962Mod Mod
    I highly doubt its the AAA messing things up. It might be the tunnels causing some kind of weird stuff to happen like Mike is getting at. Thats the only thing I can think of really. Or maybe some kind of filtering somewhere....

    Can we get a show ip route from the two routers?
    An expert is a man who has made all the mistakes which can be made.
  • flipmadflipmad Posts: 184Member
    They are production routers. We removed the AAA config and it made no difference. They actually have a Cisco switch between the routers and we are starting to think that this may be causing the problem. My sh route is going to be miles long because the tunnel is atually peering with an HQ router. But we have this exact same config (different IPs) on another router with VPN and it peers with the tunnel and with their router. The only difference is the switch in between. Unfortunately Router 2 and the switch are not managed by us so hopefully i will have some additional info for all of you shortly
  • jason_lundejason_lunde Posts: 567Member
    You could always try to use the neighbor statement instead of the network statement under the eigrp process. Could be a multicast issue on that lan segment.
  • networker050184networker050184 Posts: 11,962Mod Mod
    You could always try to use the neighbor statement instead of the network statement under the eigrp process. Could be a multicast issue on that lan segment.

    Be careful with this command if you try it though. It stops the router from processing all EIGRP multicast packets on that interface. So if you have other neighbors on there they will drop out unless you put statements for them also.
    An expert is a man who has made all the mistakes which can be made.
  • jason_lundejason_lunde Posts: 567Member
    Be careful with this command if you try it though. It stops the router from processing all EIGRP multicast packets on that interface. So if you have other neighbors on there they will drop out unless you put statements for them also.

    Good catch...probably should have mentioned that :)
  • flipmadflipmad Posts: 184Member
    Just wanted to let you know that we figured this out (a long time ago, but I just forgot to re-post). There was a non-cisco switch that was blocking multi-cast traffic.
  • captobviouscaptobvious Posts: 648Member
    That would do it! icon_cheers.gif
Sign In or Register to comment.