topic Re: ISE | TACACS Command Sets | Other Vendor in Network Access Control

ISE | TACACS Command Sets | Other Vendor

DINIZ MARTINS — Tue, 28 Jan 2020 12:52:57 GMT

Hey everyone!

We have a issues that we can't solve it yet and we need some help...

Our ISE is in version 2.4.0.357 and Installed Patches 9 and we just configure the TACACS Command Set and works fine on Cisco devices, but on others device dosent work... like Juniper and Huawei.

I have configured one especial login to do match in these "TACACS Command Set" and if I login, using this login, on Cisco devices we have match on profile and work properly, but if we login, using the same login as we login at Cisco, on Juniper or Huawei we dont have the same matches... it just like bypass...

Re: ISE | TACACS Command Sets | Other Vendor

balaji.bandi — Tue, 28 Jan 2020 13:07:01 GMT

I beleve other vendor device administation need to add in to Radius.

https://community.cisco.com/t5/security-documents/ise-device-administration-using-tacacs-and-radius/ta-p/3621655

https://www.cisco.com/c/en/us/support/docs/security/secure-access-control-system/115926-tacacs-radius-devices-00.html?referring_site=RE&pos=3&page=https://www.cisco.com/c/en/us/support/docs/security/secure-access-control-system/113590-acs5-tacacs-config.html

Re: ISE | TACACS Command Sets | Other Vendor

Jason Kunst — Tue, 28 Jan 2020 17:50:51 GMT

@balaji.bandi wrote:

I beleve other vendor device administation need to add in to Radius.

https://community.cisco.com/t5/security-documents/ise-device-administration-using-tacacs-and-radius/ta-p/3621655

https://www.cisco.com/c/en/us/support/docs/security/secure-access-control-system/115926-tacacs-radius-devices-00.html?referring_site=RE&pos=3&page=https://www.cisco.com/c/en/us/support/docs/security/secure-access-control-system/113590-acs5-tacacs-config.html

Correct also look at TACACS keyword at, i saw one on juniper there http://cs.co/ise-guides

I'd recommend asking the vendor what they support and if they have any guides as well