Can TACACS+ and Radius coexist on the same Switch

[Ibrahim Jamil]

Hi Guys

Can TACACS+ and Radius coexist on the same Switch , TACACS+ for decice Aministration while Radius for Dot1x And MAB Operations

thanks

[balaji.bandi]

yes, you can have both presents in the switch.

[JimWicks]

Yes, you define a seperate server-group for each and then reference those in the aaa method-list so looks something like:-

aaa group server tacacs+ Mgmt

    server 10.1.1.1

aaa group server radius dot1x-authentication

    server 10.1.1.2

aaa authentication login vty-mgmt group Mgmt local      <-- reference "vty-mgmt" under your VTY config.

aaa authorization exec mty-mgmt group Mgmt if-authenticated   <-- reference "vty-mgmt" under your VTY config.

<include lines here for command authorization and accounting via T+ pointing to the correct aaa-server-group>

snip.....

aaa authentication dot1x dot1x-Clients group dot1x-authentication   <-- reference "dot1x-Clients" where you need to use dot1x + Radius.