cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
287
Views
0
Helpful
1
Replies

On one Cisco Secure Server, can I have one NAS use TACACS+ and another use RADIUS?

admin_2
Level 3
Level 3

I'm maintaining my existing nas server in production using radius for dial in authentication. I want to test my second nas server using tacacs+ through the same Cisco Secure server while keeping the radius process running. I eventually want to use tacacs+ for both dial in, router and local user authentication.

1 Reply 1

Not applicable

You can do this as long as you can identify different types of access.

For example you can have ppp authentication use RADIUS and telnet authentication use TACACS, or you can have one interface (eg dialer) use RADIUS and another (eg vty) use TACACS between the same router and server.

To achieve this with Cisco Secure NT/2000 you will need to use the ip radius-server/tacacs-server source-interface command to make one router look like two to the server. For Cisco Secure Unix this is not a problem.