Authentication

[shriyesh91011]

Hi Guys,

So I have a monitoring device setup on the network. All our networking devices are integrated into TACACS, however this monitoring device only support RADIUS, is there any way to integrate RADIUS with TACACS authentication.? And also I have access to ISE too so if it can be done through it or something or do we have any other way to do it?

Thanks

[Aref Alsouqi]

Please check this post of mine and see if it helps:

Privilege Level 15 with Cisco ISE | Blue Network Security (bluenetsec.com)

[shriyesh91011]

Hi Aref, 

My monitoring device can only be configured via GUI, there is no CLI support. So do you think With the basic config on this device will it authenticate with RADIUS.

[liviu.gheorghe]

Based on the screenshot you provided, it sure seems to to "speak" RADIUS and I think it will be able to authenticate. Not sure about the rest of the attributes needed by the device.

[Aref Alsouqi]

It seems so, however, you should have other settings that need to be configured which I don't see on the screenshot you shared.

[Georg Pauwen]

Hello,

I think you can configure RADIUS along with TACACS on your devices:

aaa new-model
aaa authentication login default group radius local
aaa authorization exec default group radius local
radius-server host <RADIUS_server_IP> key <shared_secret>

aaa authentication login <method_name> group tacacs+ local
aaa authorization exec default group tacacs+ local
tacacs-server host <TACACS_server_IP> key <shared_secret>

aaa authentication login <combined_method_name> group radius tacacs+ local

line vty 0 15
login authentication <combined_method_name>

[shriyesh91011]

Hi Georg,

The monitoring device can only be configured using GUI, there is no CLI.
It only has the basic radius setup, attaching SS for reference