TACACS(Device authentication) authentication on the ISE.

[network_geek1979]

Folks,

I am now looking at some guidance to start with configuring our ISE devices for device authentication.

We have active directory groups and admins are given access to devices as per those groups, like it was on our ACS.

e.g. network admins --> full access
NOC --> read only

The admins should also login to the devices with they active directory/NT credentials.

How do we start with this now? Do you have any links/documents to share?

Regards,

N!!

[Mike.Cifelli]

Start here: https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_01000.html

Your tacacs device admin policies will be configured under:
Work Centers->Device Administration->Device Admin Policy Sets

You can easily accomplish what you are trying to do. Check out labminutes.com for free tutorials too. Good luck & HTH!