Can you control switch and router access with AD (Kerberos)

[Joseph.Rehling]

I am standing up a small environment with less than 20 switches and I want to configure the authentication so that dedicated Active Directory accounts provide access to the switches. We are not going to be able to put up an ACS box, and I don't want to use RADIUS unless I have to. Since both AD and Cisco support Kerberos, is it possible to us an AD group to control access to my switches and routers?

[arnold.llamas]

Sam,

Have you looked at these at Cisco?

http://www.cisco.com/en/US/docs/ios/sec_user_services/configuration/guide/sec_cfg_kerberos.html

Section "Login Authentication Using Kerberos"

http://www.cisco.com/en/US/docs/ios/12_2/security/command/reference/srfindx.html

or these

http://www.techrepublic.com/article/configure-cisco-routers-to-use-active-directory-authentication-the-windows-side/6180954

HTH,

Arnold