03-12-2019 09:56 AM
Hi there,
We want some of our network devices to have command authorization using TACACS. Documentation states that Duo can only be RADIUS and not a TACACS server. Does Duo support TACACS or are there any workarounds to have Duo interact with TACACS.
Thanks.
03-12-2019 10:40 AM
Welcome to the community, Connor!
There is not currently a Duo tested/supported configuration, but some customers have been able to integrate Duo with TACACS. This has been discussed in this previous thread: How to use Duo with Cisco TACACS. I recommend checking out that thread and following up there.
03-21-2019 08:15 AM
Hey Dooley,
I’ve taken a look at the thread and did some playing around. Is there any way to interface a generic TACACS server and duo without the use of Cisco ISE/ACS?
Thanks.
03-25-2019 01:19 PM
Hey Connor,
I did some poking around on this one. Duo + generic TACACS is not a known or supported configuration. Unlike ISE/ACS, we have not heard of customers successfully configuring a generic TACACS integration.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide