From dbff37e91d2168a296509428e40e974479b40d80 Mon Sep 17 00:00:00 2001 From: Christian Breunig Date: Wed, 19 Nov 2025 22:01:49 +0100 Subject: login: T8024: show user warning for unconfigured TACACS source-address Add a commit-time check and warning to the user if the TACACS source-address is not configured on the system or the given VRF. --- src/conf_mode/system_login.py | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'src') diff --git a/src/conf_mode/system_login.py b/src/conf_mode/system_login.py index 369232f34..2692f427f 100755 --- a/src/conf_mode/system_login.py +++ b/src/conf_mode/system_login.py @@ -247,6 +247,11 @@ def verify(login): verify_vrf(login['tacacs']) + if tmp := dict_search('tacacs.source_address', login): + tacacs_vrf = dict_search('tacacs.vrf', login) + if not is_addr_assigned(tmp, vrf=tacacs_vrf): + Warning(f'Specified TACACS source-address "{tmp}" is not assigned!') + if 'max_login_session' in login and 'timeout' not in login: raise ConfigError('"login timeout" must be configured!') -- cgit v1.2.3