Details

Force AAA to use the IP address of a specified interface for all outgoing AAA packets

Solution

Bind AAA services to the loopback interface.
Hostname(config)#ip {tacacs|radius} source-interface loopback {loopback_interface_number)

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/508

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Cisco.

References

• 800-53|SC-7(13)

Source

• Tenable.com/audits