Controllerless Networks

last person joined: 2 days ago 

Instant Mode - the controllerless Wi-Fi solution that's easy to set up, is loaded with security and smarts, and won't break your budget
Back to discussions
Expand all | Collapse all

Instant TACACS+ management roles possible?

This thread has been viewed 5 times

  • 1.  Instant TACACS+ management roles possible?

    Posted Jun 23, 2015 10:32 AM

    Dear all,

     

    I try to configure the TACACS+ authentication for Instant controllers.

    Basically it works, but is there a way how I can use different access roles for the users?
    I need normally an admin role and something like a "monitor" for read only.

     

    Is that possible? Or if it is not with TACACS+, is it possible with RADIUS?

     

    Thanks a lot!

     

    Sven



  • 2.  RE: Instant TACACS+ management roles possible?

    Posted Jun 23, 2015 10:37 AM

    Are you using clearpass as a tacacs server ?



  • 3.  RE: Instant TACACS+ management roles possible?

    Posted Jun 23, 2015 11:08 AM

     

    @SumaN wrote:

    Are you using clearpass as a tacacs server ?

    No, we are using the Cisco ACS 4.x and in future 5.x.

     

    Can you describe how I have to configure that? Is there something I have to add in the instant controller or on the TACACS+ server?



  • 4.  RE: Instant TACACS+ management roles possible?

    Posted Jun 30, 2015 03:21 PM

    this seems to indicate it is not possible to assign different roles

     

    http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/How-to-authenticate-IAP-admin-user-against-CPPM-over-TACACS/ta-p/192931

     

    you might experiment with level 0 or 1 and see what that does.



  • 5.  RE: Instant TACACS+ management roles possible?

    Posted Jul 01, 2015 03:17 AM

    Thank you very much for the link.

     

    So it seems that this is not working.

    Is it possible to assign different roles with RADIUS?



  • 6.  RE: Instant TACACS+ management roles possible?
    Best Answer

    EMPLOYEE
    Posted Aug 03, 2015 11:13 AM

    Management roles for TACACS+ and RADIUS will be added in Instant 4.2 which will be released in the coming weeks.



  • 7.  RE: Instant TACACS+ management roles possible?

    Posted Jun 23, 2015 10:38 AM


  • 8.  RE: Instant TACACS+ management roles possible?

    Posted Jun 23, 2015 10:39 AM

    Hi friend,

     

    It is absolutely possible :)

     

    Please feel free for any further help on this.