topic Thanks for the reply, in Network Access Control

TACACS+ & RADIUS versions

Richard Murphy — Wed, 13 Mar 2019 00:47:29 GMT

Hi,

Can anyone point me at the versions of TACACS+ and RADIUS that Cisco ACS 5.8 uses or how to find them on the ACS itself ?

I'm being asked by an auditor to provide the versions and the vendor documentation on both protocols.

Thanks in advance.

Rich

You can run both tacacs and

Gagandeep Singh — Tue, 20 Dec 2016 12:43:57 GMT

You can run both tacacs and radius on any ACS version. However, in ISE TACACS comes from ISE 2.0 version. Prior to 2.0, we only support RADIUS.

Hope it answers your query. Also you can look for release notes for any ISE or ACS version.

Regards

Gagan

ps: rate if it helps!!!!

I do not know if there is a

Rahul Govindan — Tue, 20 Dec 2016 14:13:29 GMT

I do not know if there is a 'Radius version' that the ACS supports. Radius servers usually have to conform to RFC's 2865 and 2866. There are a few other RFC's that document extensions and new features. The ACS support for this is mentioned here:

http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-8/user/guide/acsuserguide/rad_tac_phase.html

TACACS+ is a CISCO designed extension to TACACS and has the latest version of 1.78 as per the RFC draft given below:

https://tools.ietf.org/html/draft-grant-tacacs-02

My assumption is that Cisco supports the latest version, but I believe the best way to confirm it is by taking a TACACs+ packet capture and looking at the headers. More information about TACACS+ is given in the same link above.

Thanks for the reply,

Richard Murphy — Tue, 20 Dec 2016 15:03:16 GMT

Thanks for the reply,

Think I found a newer RFC - >https://tools.ietf.org/html/draft-ietf-opsawg-tacacs-05