Duo Integration with ISE for TACACS+ Device Administration with AD Users

Managing Devices forum
#1

Hi guys,

I need to know if is possible use DUO with ISE connected tu Azure AD to give access to our Network equipment using Tacacs+

i already test using duo with duo proxy+ise+ad on-premise, but now i need use ise with azure ad, the idea is not use a duo proxy

image
image1472×544 85.2 KB

Thanks

#2

Hi @Patricio_Mansilla,

As far as I know, the only way to integrate ISE with Duo is through Radius and hence through the authentication proxy.

This is also stated in the Duo documentation:

To integrate Duo with your Cisco ISE, you will need to install a local Duo proxy service on a machine within your network. This Duo proxy server will receive incoming RADIUS requests from your Cisco ISE, contact your existing local LDAP/AD or RADIUS server to perform primary authentication, and then contact Duo’s cloud service for secondary authentication.

HTH
Antony

1 Like
#3

Hi @Patricio_Mansilla

Can you please share how you use DUO for ISE Device Admin with AD

Thanks,

#4

Hi @Jamie7 for AD you could use this guide: Duo MFA Integration with ISE for TACACS+ Device Administration with Microsoft Active Directory Users - Cisco Community

1 Like
#5

Thanks alot @Patricio_Mansilla, Appreciate your response.

1 Like