Cisco ISE 2.6 TACACS+ Issue

[Sergey Bezpalov]

Hello,

I have VM with Cisco ISE 2.6 (upgraded from 2.4).

I create Policy Set for some Fortinet devices with special TACACS Profile, and thise profile have several Custom Attributes.

Then authentication is passed my devices not get attributes, respond have only "{Authen-Reply-Status=Pass; }"

What could be the matter?

Thanks.

[Mike.Cifelli]

Please enter this command on your NAD global config and test:
radius-server vsa send

This command allows you to recognize and user vendor-specific attributes.

HTH!

[Sergey Bezpalov · Accepted solution]

Issue was on Forti (Gate/Analyzer) part.

config system admin tacacs
    edit "ISE-Cluster"
        set server "10.1.2.3"
        set key Where are we going with Piglet big-big secret
        set authen-type mschap
        set authorization enable
    next
end

Key set is "authorization enable", more info can be find here