My work environment currently uses FreeRADIUS for all of our customer and staff AAA requirements. This currently includes access to all of our Cisco devices.
My boss now wants to set up a TACACS+ server for access to all our Cisco devices, but wants the TACACS+ server to query the RADIUS server and its database in turn. In other words, he wants the TACACS+ server to act as a kind of proxy and relay the request to RADIUS, and to have RADIUS pass the accept or reject back to the TACACS+, and then back to the Cisco device.
Does anyone know if this is possible? I'm pretty sure you can do this with 2 RADIUS servers...