topic Re: ISE Configure TACACS on Brocade in Network Access Control

ISE Configure TACACS on Brocade

bforan — Tue, 19 Mar 2019 22:21:34 GMT

I am trying to setup TACACS on some older Brocade switches running 7.4 OS. I have configured one attribute in the Shell Policy brcd-role=admin and that seems to work. However I need to also add a ChassisRole as well to have all the security attributes applied when I login. I am not able to find the proper syntax to have the ChassisRole applied along with the brcd-role. Anyone have any familiarity with setting up Brocade switches with TACACS?

Re: ISE Configure TACACS on Brocade

bforan — Wed, 20 Mar 2019 16:11:08 GMT

Supposedly the following Syntax works on other TACACS platforms but I have not been able to get the Radius responses to work. Is there anyway to apply this in ISE besides one attribute at a time in the shell policy?

service = exec {
                brcd-role = admin
                brcd-AV-Pair1 = "homeLF=128;LFRoleList=admin:1,3,4;securityAdmin:5,6"
                brcd-AV-Pair2 = "chassisRole=admin"
        }

Re: ISE Configure TACACS on Brocade

leng20021976 — Fri, 27 Mar 2020 06:53:40 GMT

i am also having this issue, unable to set chassis role attribute.

Please help..

Re: ISE Configure TACACS on Brocade

hslai — Fri, 27 Mar 2020 20:12:08 GMT

In the "Task Attribute View", pick Generic as the Common Task Type. Then, go to the "Raw View" and put in the info.

Re: ISE Configure TACACS on Brocade

leng20021976 — Mon, 30 Mar 2020 07:40:56 GMT

hi,

I tried to put as Generic and keyed in the syntax in Raw View, but i am still getting no chassis permission

Re: ISE Configure TACACS on Brocade

hslai — Mon, 30 Mar 2020 18:31:22 GMT

I would suggest you to seek support from Brocade, as the issue you are seeing is specific to Brocade and might be specific to the particular device platform.

Re: ISE Configure TACACS on Brocade

bruno-noc — Wed, 29 Jan 2025 12:30:16 GMT

I did it, passing attributes as plain as it should be, no spaces, no doubles quotes:

and now it's working fine in FOS 8.2.3e1, sws brocade SN3000B and SN6000B

Re: ISE Configure TACACS on Brocade

bruno-noc — Wed, 29 Jan 2025 12:33:58 GMT