cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
862
Views
0
Helpful
2
Replies

ACS 5.1 AD authentication with tacacs+

mario-white
Level 1
Level 1

Can anyone point me to a document or explain how I can use the external databse rather than the internal database to be able to log on to a device using tacacs+? The ACS 5.1 is already integrated with AD and I have tacacs+ working with the internal database, thanks.

2 Replies 2

sslewis22
Level 1
Level 1

Set the Identity source of your network administration policy to Active directory rather than Internal. (Probably called 'AD1'). If you want to use _both_ then create an Identity Store Sequence first, that checks internal followed by AD, and use that Identity Store Sequence as the Identity source for your policy.

Thanks I had already done that turns out what I needed to do was to customize the conditions and add External groups.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: