From 4f7dfc249e77dd1e076b92b24b79c9122fbd27ef Mon Sep 17 00:00:00 2001 From: Kannan KVS Date: Tue, 8 Jan 2019 03:58:03 -0800 Subject: [PATCH] mgmt_vrf_namespace_tacacs: Tacacs enhancement on top of namespace solution for management vrf --- config/aaa.py | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/config/aaa.py b/config/aaa.py index 32e4feaf21..3cc2064f20 100644 --- a/config/aaa.py +++ b/config/aaa.py @@ -185,7 +185,16 @@ def add(address, timeout, key, auth_type, port, pri, use_mgmt_vrf): if key is not None: data['passkey'] = key if use_mgmt_vrf : - data['vrf'] = "mgmt" + entry = config_db.get_entry('MGMT_VRF_CONFIG',"vrf_global") + if not entry or entry['mgmtVrfEnabled'] == 'false' : + # Either VRF entry does not exist or it is disabled. + # Silenty ignore the --use-mgmt-vrf if VRF is not enabled + data['vrf'] = "None" + else: + data['vrf'] = "mgmt" + + else: + data['vrf'] = "None" config_db.set_entry('TACPLUS_SERVER', address, data) tacacs.add_command(add)