Configuring TACACS+ Attributes on a Switch

[StefanUlrich]

Hi there,

ist there any possibility to configure a switch to send TACACS+-attributes with certain values to a server?

Scenario: We would like the switch to send information like "I am a switch in New York" to the server without using the IP address as matching criterion on the server.

Regards, Stefan

[nspasov]

I am not aware of such capability on the switch. However, if using ISE or ACS, you can define local groups that can be based on Device Type, Location, etc. You can use those groups to define your policies vs just using the NAD's IP address. 

I hope this helps!

Thank you for rating helpful posts!