AAA for SDWAN manager users

[avdheshkumar]

Hi

one of our clients wants to use Tacacs for users accessing SDWAN manager. i have not seen any option in the vmanage GUI has anyone done this . if yes, please guide.

Thanks in advance.

[MHM Cisco World]

did you check cli 
system aaa <<- 
MHM

[Kanan Huseynli]

HI,

how do you manage sdwan-manager? Template based or CLI?

If template you have AAA template for the vManage (sdwan manager) and fill relevant fields in GUI.

For CLI below is base commands:

system

aaa
auth-order tacacs local radius
auth-fallback

tacacs
server [IP]
vpn [number]
secret-key [key]

https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/system-interface/vedge-20-x/systems-interfaces-book/user-access-authentication.html

[Ruben Cocheno · Accepted solution]

@avdheshkumar 

Here is the guide for it, which include ISE as well

https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/215349-radius-and-tacacs-based-user-authenticat.html

[dijix1990]

You can use guide which mentioned @Ruben Cocheno, I've used this guide for configuring tacacs recently, but I needed to add new groups in the aaa feature for vmanage to set it more granulated. They are network operations and security operations because they weren't in the vmanage https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/system-interface/vedge-20-x/systems-interfaces-book/rbac.html

BTW, just found video guide https://m.youtube.com/watch?v=5g2d750vqkM