topic Re: Integrate TACACS+ between Cisco WLC and Cisco ISE in Network Access Control

Integrate TACACS+ between Cisco WLC and Cisco ISE

Arie -- — Fri, 21 Feb 2020 18:45:14 GMT

Hi,

I want to integrate Cisco WLC and Cisco ISE 2.3 for AAA using TACACS+.

From configuration guide on link below, we can set profile to authorize user what tab he/she can access.

https://communities.cisco.com/docs/DOC-68196

But, in Cisco WLC, the Internal User has capability to choose Read-Only or Read-Write without filtering what tab can be accessed. If I integrate the Cisco WLC to Cisco ISE for TACACS+, can I divide user profile only to Read-Only and Read-Write? Instead of divide user on what tab he/she can access.

Thank you

Arie

Re: Integrate TACACS+ between Cisco WLC and Cisco ISE

Karsten Iwen — Mon, 12 Feb 2018 12:32:23 GMT

You can assign your read-write users the role "ALL" and the read-only users the role "MONITOR".

Re: Integrate TACACS+ between Cisco WLC and Cisco ISE

Arie -- — Wed, 14 Feb 2018 07:12:26 GMT

Great! Thank you. It's work.

Re: Integrate TACACS+ between Cisco WLC and Cisco ISE

shammock — Wed, 20 Apr 2022 18:45:05 GMT

Will a read-only user with the role "MONITOR" also apply to the CLI or only WebUI please?