cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1572
Views
0
Helpful
2
Replies

TACACS Shared Secret

Geekstur1
Level 1
Level 1

I'm curious if folks here use a common shared secret or if the shared secret is unique between ISE end  each device in the network for tacacs authentication.  I currently have switches using one secret, routers using another, and WAPs using yet another.  I'm interested in what the best practice is for this process.

 

Thanks,

Geekstur

1 Accepted Solution

Accepted Solutions

balaji.bandi
Hall of Fame
Hall of Fame

It is all security poliocy business to business.

 

I have done with different people  - who has Physical Access controlled device all same secret.,

if they hosted in Public place used different secret of each device for security reason.,

 

All in same place. your approach also works, based on the Switch / Router / WLC have different secret.

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

View solution in original post

2 Replies 2

balaji.bandi
Hall of Fame
Hall of Fame

It is all security poliocy business to business.

 

I have done with different people  - who has Physical Access controlled device all same secret.,

if they hosted in Public place used different secret of each device for security reason.,

 

All in same place. your approach also works, based on the Switch / Router / WLC have different secret.

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Seb Rupik
VIP Alumni
VIP Alumni

Hi there,

If a company is having to manually log into and update 00's of devices then they will probably opt for a single secret across all devices. I have worked at places with a security posture like this....they also had no AAA and a single local admin account across the entire network!

 

Once you start scaling out to 000's of devices by this point you will hopefully be using automation, getting a script to update both the NAC and endpoint with a unique secret takes no more effort than using a single secret. 

 

cheers,

Seb.

Review Cisco Networking for a $25 gift card