topic TACACS+ on ZoneFlex P300 in Access Points - Indoor and Outdoor

TACACS+ on ZoneFlex P300

pierre_pierre_c — Tue, 25 Oct 2016 09:59:07 GMT

I try to configure TACACS+ on my ZoneFlex P300 with my Cisco ACS 5.8, but it's not working.

On the ACS i can see "Wrong password or invalid shared secret" , but the shared secret and the user password are working....

Is it specific attribute for ZoneFlex with ACS ?

thanks in advance for your feedback.

Best regard

Re: TACACS+ on ZoneFlex P300

michael_brado — Tue, 25 Oct 2016 16:00:43 GMT

You mean the P300 outdoor point-to-point bridge? And what are you trying to configure to use TACACS+ authentication, the login to the AP or its WLAN?

See the P300 User Guide, page 38 begins the details on setting up TACACS+ admin login access, and must include one of three admin privilege levels.

https://support.ruckuswireless.com/documents/804-zoneflex-p300-release-100-1-0-9-43-ga-user-guide

Re: TACACS+ on ZoneFlex P300

pierre_pierre_c — Wed, 26 Oct 2016 07:57:21 GMT

Finally it's working, but the end user password do not contain a "$" .
When there is a $ on the password it's not working.

Best regard

Re: TACACS+ on ZoneFlex P300

monnat_systems — Wed, 26 Oct 2016 09:18:06 GMT

as far i know while working with one end customer with similar issue with AD password containing $ were not working and it turned out Ruckus does NOT like passwords with $ and there was a bug opened for the same. not sure.. if that got sorted.
That was years ago and for controller and AP's

Re: TACACS+ on ZoneFlex P300

michael_brado — Wed, 26 Oct 2016 16:14:55 GMT

Thanks for your feedback too Pierre, this is something I'll capture in a Knowledge Base Article.
I've also requested an example of the ACS side setup for an AP Admin login from Engineering,
which I don't have for the article. If I email you, can you share an example from your TACACS+
setup?

Re: TACACS+ on ZoneFlex P300

phil_lafontaine — Tue, 22 Jun 2021 16:36:04 GMT

I can confirm I also had this issue. Our P300's will not allow anyone with a $ in their password to authenticate via TACACS.