topic Re: TACACS+ Functionality in Network Access Control https://community.cisco.com/t5/network-access-control/tacacs-functionality/m-p/3484023#M499418 <HTML><HEAD></HEAD><BODY><P>CoA Disconnect/Terminate is a RADIUS only feature.</P><P>There is no API to add T+ policies but ISE admin web UI can configure a combination of username, NAD, and PSN. For example,</P><P></P><P><IMG alt="Screen Shot 2018-06-07 at 4.56.34 PM.png" class="image-1 jive-image" src="/legacyfs/online/fusion/117470_Screen Shot 2018-06-07 at 4.56.34 PM.png" style="height: 371px; width: 620px;" /></P></BODY></HTML> Thu, 07 Jun 2018 23:59:00 GMT hslai 2018-06-07T23:59:00Z TACACS+ Functionality https://community.cisco.com/t5/network-access-control/tacacs-functionality/m-p/3484022#M499417 <HTML><HEAD></HEAD><BODY><P>Hi team,</P><P></P><P>Do we have any option in ISE to terminate all or specific TACACS+ active sessions? Also, not sure if as part of ISE 2.4 we have any new TACACS+ API that allows to do that based on a combination of logged username + NAD + PSN? Any ideas/input would be much appreciated.</P><P></P><P>Thanks,</P><P></P><P>Oriol</P></BODY></HTML> Wed, 06 Jun 2018 15:46:01 GMT https://community.cisco.com/t5/network-access-control/tacacs-functionality/m-p/3484022#M499417 omadrile 2018-06-06T15:46:01Z Re: TACACS+ Functionality https://community.cisco.com/t5/network-access-control/tacacs-functionality/m-p/3484023#M499418 <HTML><HEAD></HEAD><BODY><P>CoA Disconnect/Terminate is a RADIUS only feature.</P><P>There is no API to add T+ policies but ISE admin web UI can configure a combination of username, NAD, and PSN. For example,</P><P></P><P><IMG alt="Screen Shot 2018-06-07 at 4.56.34 PM.png" class="image-1 jive-image" src="/legacyfs/online/fusion/117470_Screen Shot 2018-06-07 at 4.56.34 PM.png" style="height: 371px; width: 620px;" /></P></BODY></HTML> Thu, 07 Jun 2018 23:59:00 GMT https://community.cisco.com/t5/network-access-control/tacacs-functionality/m-p/3484023#M499418 hslai 2018-06-07T23:59:00Z