topic Is it possible to control the juniper command through ISE3.2 in Network Access Control

Is it possible to control the juniper command through ISE3.2

CCC3 — Thu, 13 Feb 2025 05:58:12 GMT

With ISE 3.2, I want to control command of juniper equipment using TACACS.

Juniper uploaded vMX virtually.

When I conducted the test, it was not controlled normally.

When testing with existing Cisco equipment, each time you enter a command, you are authenticated, but Juniper is authenticated once you log in and does not authenticate the command.

I wonder if this is the result of the difference between vendors.

Re: Is it possible to control the juniper command through ISE3.2

PSM — Thu, 13 Feb 2025 09:57:32 GMT

@CCC3 I think its mainly dependent on host TACACS is implemented in NAD(Juniper in this case). If NAD support command authorization, I believe ISE can control it. I have no/very little experience with juniper. Did you confirm if it is supported and you have enabled it ?

Re: Is it possible to control the juniper command through ISE3.2

thomas — Wed, 19 Feb 2025 21:48:58 GMT

This is a duplicate post of

https://community.cisco.com/t5/network-access-control/is-it-possible-to-control-the-juniper-command-through-ise/m-p/5260003#M594964