IPv6上的Tacacs

Question

我已经将我的Redhat Enterprise服务器5.5迁移到IPv6。现在，我想运行tacacs+ for IPv6。当从我的客户端进行测试时，它返回“无法连接到IPv6地址的服务器”，但是对于IPv4，它工作得很好。

Linux侦听端口的快照：

[root@ADA-Linux-Service-2 ~]# netstat -an | grep :49
tcp        0      0 0.0.0.0:49                  0.0.0.0:*                   LISTEN

tacacs服务启动后，我尝试使用IPv6绑定选项，它返回以下错误：

Reading config
Version F4.0.4.26 Initialized 1
get_socket: bind 49 Address already in use

我不知道如何让tacacs+监听IPv6地址。我是否需要在tac_plus.cfg中创建条目来侦听IPv6？

Answer 1

我遇到了一个setup问题线程，它讨论了如何设置TACACS+ for IPv6，标题为：如何使TACACS+为IPv6接口工作。具体来说，您需要将其添加到tac_plus.cfg文件中：

id = spawnd {
listen = {address=2001::aaa1 port = 49 }
spawn = {
instances min = 1
instances max = 10
}

listen行包括IPv6 IP地址。您可以确认它正在使用以下命令：

$ netstat -l
...
tcp6 0 0 2001::aaa1%32175:tacacs [::]:* LISTEN

完整示例.cfg文件

id = spawnd {
  listen = {address=2001::aaa1 port = 49 }
  spawn = {
    instances min = 1
    instances max = 10
  }
  background = no
}

id = tac_plus {
  debug = PACKET AUTHEN AUTHOR

  access log = /hone/tornado/tacacs+/access.log
  accounting log = /home/tornado/tacacs+/acct.log

  host = world {
    address = ::/0
    prompt = "Welcome\n"
    enable 15 = clear force10
    key = testing123
  }
  group = admin {
    default service = permit
    service = shell {
      default command = permit
      default attribute = permit
      set priv-lvl = 15
    }
  }
  user = admin {
    password = clear admin
    member = admin
    service = shell {
      default command = permit
      default attribute = permit
      set priv-lvl = 15
    }
  }
}