TACACS+ Functionality

[omadrile]

Hi team,

Do we have any option in ISE to terminate all or specific TACACS+ active sessions? Also, not sure if as part of ISE 2.4 we have any new TACACS+ API that allows to do that based on a combination of logged username + NAD + PSN? Any ideas/input would be much appreciated.

Thanks,

Oriol

[hslai]

CoA Disconnect/Terminate is a RADIUS only feature.

There is no API to add T+ policies but ISE admin web UI can configure a combination of username, NAD, and PSN. For example,