I have recently migrated from ISE v1.3 on dual 3355 hardware to ISE 2.1 on dual SNS3595 hardware. This ISE is doing just RADIUS/AAA...and we'll expand it's function later.
In the meantime, want to build a pair of TACACS servers just for TACACS/AAA of access to our network devices: switches, routers, ASAs, etc using a separate local directory - completely isolated from the production ISE 2.1.
What are my options for reusing the 3355 hardware for ACS 5.x or ISE 2.0.1 or 2.1 as a TACACS server for a limited number of authentications and devices?