TACACS+ & RADIUS versions

[Richard Murphy]

Hi,

Can anyone point me at the versions of TACACS+ and RADIUS that Cisco ACS 5.8 uses or how to find them on the ACS itself ?

I'm being asked by an auditor to provide the versions and the vendor documentation on both protocols.

Thanks in advance.

Rich

[Gagandeep Singh · Accepted solution]

You can run both tacacs and radius on any ACS version. However, in ISE TACACS comes from ISE 2.0 version. Prior to 2.0, we only support RADIUS.

Hope it answers your query. Also you can look for release notes for any ISE or ACS version.

Regards

Gagan

ps: rate if it helps!!!!

[Rahul Govindan]

I do not know if there is a 'Radius version' that the ACS supports. Radius servers usually have to conform to RFC's 2865 and 2866. There are a few other RFC's that document extensions and new features. The ACS support for this is mentioned here:

http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-8/user/guide/acsuserguide/rad_tac_phase.html

TACACS+ is a CISCO designed extension to TACACS and has the latest version of 1.78 as per the RFC draft given below:

https://tools.ietf.org/html/draft-grant-tacacs-02

My assumption is that Cisco supports the latest version, but I believe the best way to confirm it is by taking a TACACs+ packet capture and looking at the headers. More information about TACACS+ is given in the same link above.

[Richard Murphy]

Thanks for the reply,

Think I found a newer RFC - >https://tools.ietf.org/html/draft-ietf-opsawg-tacacs-05