cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
432
Views
0
Helpful
1
Replies

Tacacs with radius

dmc00001
Level 1
Level 1

Hello

I have a 3640 configured for dial in users. It authenticates using tacacs with the tacacs file on a linux box. We want to move to a windows radius solution but need to keep in place the tacacs as well.

Firstly: is it possible to run tacacs and radius authentication on the same router?

Secondly: where can i find some documentation to show me how to do it?

Thanks in advance for any help recieved

Dave

1 Reply 1

tepatel
Cisco Employee
Cisco Employee

YES..you can run run tacacs and radius on a same router..Just configure different aaa lists (scheme) for radius and tacacs and use it accordingly..I can't find any exact sample config which dicsuss that but here is the way..

aaa new-model

aaa authentication ppp rad-auth group radius

aaa authentication ppp tac-auth group tacacs

interface

encap ppp

ppp authentication chap rad-auth

for radius and you can use "ppp authentication chap tac-auth" for tacacs authentication..

Tejal