cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
378
Views
3
Helpful
2
Replies

Can I set up a login banner on the NAD equipment during ISE's setup

CCC3
Level 1
Level 1

When performing TACACS authentication through ISE,

If the NAD equipment succeeds in TACACS authentication, can I get the login banner to float?

If you can, can you let the TACACS information (user username, ip, etc.) pop up there?

2 Replies 2

PSM
Level 1
Level 1

Don't think you can send a banner from ISE after authentication. There are multiple banner options locally at least in Cisco devices but they are pretty much static.

https://www.wiresandwi.fi/blog/cisco-ise-configuring-tacacs-authentication-for-device-administration <<-

ise-tacacs-prompt.png

You can not set banner in ISE when user success or failed but you can config TACACS to show unique Username/Password prompt 
this will make you sure that user use tacacs to access device.

you can also use below in device

aaa authentication banner delimiter-string delimiter
aaa authentication fail-message delimiter-string delimiter

MHM