ISE with Aruba Clearpass TACACS

[James Davies]

To manage one of our clients, we use our ISE (2.7) to manage the Clearpass device, but users are not logging on, the Policy is being hit, but doesnt show in the logs and the user is refused login,

I created a TACACS Profile with the AV Pair " AdminPrivilege=Super Administrator " but I suspect this is wrong, I cannot find information anywhere on what TACACS profile to use for this!

Any help appreciated,.

[Arne Bier · Accepted solution]

Have you seen this article in Aruba Airheads?  It appears that the response from a TACACS+ server to Clearpass has to be quite specific. I have not done it myself though

[James Davies · Accepted solution]

The solution was to create a TACACS PROFILE like this: Took me all day, but it worked for me

[jvooght01]

Sorry to bring up an old thread. What does your Clearpass TACACS service for Management Logins look like? Authentication is hitting ISE and passing, but Clearpass is failing stating the user cannot be found.

[jvooght01]

Disregard my last. I figured out my issue. I had to set the device to "Single Connect Mode". Without that the authorization was failing with a TCP RST.