ACI integration with ISE for Device Administration

[snarayanaraju]

Hello Experts - We are trying to add ACI to ISE for Role-Based Authentication using TACACS. ACI is in Out of Band (OOB) deployment

Question: When adding Leaf and Spine Switches in ISE as NAD, I will be prompted for entering the shared key. Will I be used the same Key which I use when adding APIC to ISE because we don't configure Leaf/Spine explicitly. The configuration is pushed from APIC

Thanks. Sairam

[julian.bendix]

Hi!

Haven't tried this before to be honest (will try it in a lab troughout the next week :) )

But so far.. if I read the following:

https://community.cisco.com/t5/data-center-documents/configuring-tacacs-authentication-to-aci-fabric-with-cisco-acs/ta-p/3228328

It seems that the same shared secret as configured on the APIC will be used for the Switches as well.

Hope that helps, otherwise I can update you once I have labbed this scenario.

Best regards
Juls

[snarayanaraju]

Thank you Julus