ACI Device Administration using ISE

[snarayanaraju]

Hello Experts - Looking for your help before i go configuring ACI to integrate with ISE for Role Based Access (RABC) and Authenticate ACI login using ISE

I read documents and understood that ACI APIC and Leaf/Spine Switches have to be added to ISE in Network Devices (NAD).  I am pretty sure I can configure APIC as Network Device is ISE by entering the TACACS Password which i configured in APIC. 

Question: When adding Leaf/Spine Switches in ISE as Network Devices, what password I have to enter in ISE ? Should it be the one I configured for APIC?

regards,Sairam

[julian.bendix]

Hi!

Haven't tried this before to be honest (will try it in a lab troughout the next week :) )

But so far.. if I read the following:

https://community.cisco.com/t5/data-center-documents/configuring-tacacs-authentication-to-aci-fabric-with-cisco-acs/ta-p/3228328

It seems that the same shared secret as configured on the APIC will be used for the Switches as well.

Hope that helps, otherwise I can update you once I have labbed this scenario.

Best regards
Juls