Radius & Tacacs

[will.shaw]

I have a Cisco AP1200, I want admin access to be authenticated via Tacacs+ and wireless users to be authenticated be Radius. However I cannot seem to set the ACS 3.2 to accept both types of authentication for one device, either one or the other. I have tried adding two devices in, one for each type of authentication, however you cannot have two devices with the same name. Is there a possible work-around for this?

[a-vazquez]

I do not think this is possible.

[jasonlow]

Give both APs a unique hostname, eg. aptest (using RADIUS Cisco Aironet), aptest+ (TACACS+).

[ozlemduran]

hi Will,

all you need is to setup two group under "Network Device Groups" then you can use one group for Radius and other group for Tacacs.

For that follow this path:

Interface Configuration-->Advanced Options-->(check)Network Device Groups

I hope this helps