Repurpose ISE 3355 Hardware for TACACS server?

[kbyrd]

I have recently migrated from ISE v1.3 on dual 3355 hardware to ISE 2.1 on dual SNS3595 hardware. This ISE is doing just RADIUS/AAA...and we'll expand it's function later.

In the meantime, want to build a pair of TACACS servers just for TACACS/AAA of access to our network devices: switches, routers, ASAs, etc using a separate local directory - completely isolated from the production ISE 2.1.

What are my options for reusing the 3355 hardware for ACS 5.x or ISE 2.0.1 or 2.1 as a TACACS server for a limited number of authentications and devices?

[nspasov]

Hi there. Unfortunately, you will not be able to directly install neither ACS or ISE 2.x family on that appliance as neither one of it is supported. However, you can install the free version of ESXi and run an ISE/ACS VM directly off that :)

Keep in mind though that this appliance is pretty weak when it comes to resources (CPU and RAM):

http://www.cisco.com/c/en/us/td/docs/security/ise/1-1-1/installation_guide/ise_install_guide/ise_ovr.html

I hope this helps!

Thank you for rating helpful posts!