topic Re: ISE 2.2 TACACS+ and OTP Integration in Network Access Control

ISE 2.2 TACACS+ and OTP Integration

rroulhac — Thu, 06 Apr 2017 14:27:03 GMT

Team,

Do we have the ability to suport One Time Passwords with TACACS+?

Do we have any documentation of supported OTP venders?

Grace and Peace,

Robert E Roulhac Jr

Virtual Systems Engineer II

Cisco TSN (Technical Solutions Network)

rroulhac@cisco.com

Office: 919.5745455

Re: ISE 2.2 TACACS+ and OTP Integration

hslai — Thu, 06 Apr 2017 22:58:58 GMT

Yes, ISE inherits T+ with OTP from ACS.

Table 7 of Cisco Identity Services Engine Network Component Compatibility, Release 2.2

shows,

Token Servers
RSA ACE/Server	6. x series
RSA Authentication Manager	7. x and 8. x series
Any RADIUS RFC 2865-compliant token server	—

Re: ISE 2.2 TACACS+ and OTP Integration

rroulhac — Fri, 07 Apr 2017 12:37:23 GMT

Does this mean any OTP server that supports RFFC2865 We should be able to integrate with no issues?

Am I correct in assuming the following: Because the customer is currently using ACS, and they are migrating to ISE, the OTP server they are using (Microsoft MFA) should definitely be supported in ISE?

Just want to be clear before communicating a definitive answer.

Grace and Peace,

Robert E Roulhac Jr

Virtual Systems Engineer II

Cisco TSN (Technical Solutions Network)

rroulhac@cisco.com

Office: 919.5745455

Re: ISE 2.2 TACACS+ and OTP Integration

Timothy Abbott — Fri, 07 Apr 2017 15:54:17 GMT

Hi Robert,

Yes, any RFC2865 compliant solution will work.

Regards,

-Tim