I have a complex problem for you. My customer has Cisco 3640 router which sends authentication/authorization via tacacs+ to a Cisco ACS 3.1. The ACS acts as a proxy to other authentication services. We have a problem when we want to send authentication from the ACS to a radius server. The problem is that Tacacs+ first sends the username for authentication, when the Acs proxies this request to a radius server this fails due to the radius server expects username+password in the auth.req. Is their a way around this where we can keep the tacacs+ to the Acs or do we have to switch to radius between the router and the acs?
