How can I have my Cisco router authenticate through my FreeIPA?

[aleblanc501]

Hello,

As the above states I am trying to get my Cisco router to authenticate through our FreeIPA server and cannot find any info on this anywhere. The only thing I get is how to setup the router to be an LDAP server and I do not want that. Has anyone else done this before? Any info will help.

Thanks,

Adam

[Seb Rupik]

Hi there,

For authentication, you need a service which support TACACS or RADIUS. FreeIPA supports neither, it is a directory server.

If you want to use FreeIPA I suggest you configure freeRADIUS and specify the FreeIPA server as a LDAP Directory server. Configure your Cisco devices to authenticate against the FreeRADIUS server.

This guide will get you some of the way there:

https://www.freeipa.org/page/Using_FreeIPA_and_FreeRadius_as_a_RADIUS_based_software_token_OTP_system_with_CentOS/RedHat_7

cheers,

Seb.

[aleblanc501]

Thank you for the info, I will look into this and let you know how it goes.