Can ACS run TACACS+ adn RADIUS concurrently?

[ccsmith705]

I know that ACS supports both TACACS+ and RADIUS protocols. My question is can ACS run TACACS+ and RADIUS concurrently?

[r.perera]

Yes, both could run concurrently, CSTacacs and CSRadius are the two services in Windows environment

[ccsmith705]

Thank you for clearing things up for me.

[scottosan]

Yes, just keep in mind that if you want to use TACACs+ and Radius on the same AAA client, you will have to set up 2 AAA Clients for the same device, 1 for TACACS+ and 1 for Radius.

[ccsmith705]

Thanks for the tip.

[kcorkins]

how do you set up 2 AAA clients in ACS? It keeps telling me "host already exists".

[cdwyer]

You need to change the name of the second one. You can't have to devices with the same name.

[kcorkins]

Forgive my simplistic questions, but, how do you configure a single device to use one name for TACACS+ authentication, and another for RADIUS Authentication?

[matt.austin]

Once you go into Network Configuration, you enter the Network Device Group you want to add the device to. Select the option to add a client device and input the information, but enter a different client hostname, with the same IP Address in each seperate Network Device Configuration. You can specify which Network Device Group for the client to use, and in the specific group is where you will specify which resources the client members will be able to access. I specified a few different groups with different access restricitions, because I didn't want the Dial -In or Wireless people to have Admin Access to my TACACS+ configured devices...

Let me know if this helps...