Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Users might experience few discrepancies in Search results. We are working on this on our side. We apologize for the inconvenience it may have caused.
New Member

ACS 4.2 profiles with Tacacs ?

Hello

I use ACS 4.2 (applicance) with Network Access Profiles. It's a very big problem that profiles support only radius protocol, i need to use tacacs protocol with profiles.I need tacacs for command authorization. Is there any way to have such a rules on ACS 4.2:

- if logging from NetworkDeviceGroup1 using radius use local authentication

- if logging from NetworkDeviceGroup2 using tacacs use RSA securID (external Radius authentication).

Best regards,

1 ACCEPTED SOLUTION

Accepted Solutions
Silver

ACS 4.2 profiles with Tacacs ?

Hello,

on ACS 4.X NAP only works with radius.

- if you want you can go to ACS 5.X , which is more flexible.

it run role based authentication / authorization and you can combine roles you need in more flexible way.

please check these links:

1)     http://www.youtube.com/watch?v=Xin98O-Q4JY

2)     http://www.youtube.com/watch?v=vOxcrEU_-Gw&feature=related

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.1/user/guide/access_policies.html

Kind regards

Talal

==

Don't forget to rate answers that you find useful

please rate answers that you find useful , and mark as answered - when it is :-) - so others can find it easily

1 REPLY
Silver

ACS 4.2 profiles with Tacacs ?

Hello,

on ACS 4.X NAP only works with radius.

- if you want you can go to ACS 5.X , which is more flexible.

it run role based authentication / authorization and you can combine roles you need in more flexible way.

please check these links:

1)     http://www.youtube.com/watch?v=Xin98O-Q4JY

2)     http://www.youtube.com/watch?v=vOxcrEU_-Gw&feature=related

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.1/user/guide/access_policies.html

Kind regards

Talal

==

Don't forget to rate answers that you find useful

please rate answers that you find useful , and mark as answered - when it is :-) - so others can find it easily

313
Views
0
Helpful
1
Replies
CreatePlease to create content