<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;" http-equiv="Content-Type" >
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
<font size="2"><p>To your first question: You can give every user in Radius it's own priv-level. You can configure your Cisco that CLI access is only allowed with a priv-level x and higher. This would be the same like Tacacs.<br>--<br>Thoralf Freitag<br>Manager Health Services System Administration<br><br>Phone: +49 (0) 30 68905-4611<br>Cellular:+49 (0) 151 1631-4611<br>Fax: +49 (0) 30 68905-2940<br>Mail: Thoralf.Freitag@biotronik.com<br><br>*** Sent via Blackberry. ***<br><br>http://www.biotronik.com<br><br>*********************************************************************************<br>BIOTRONIK GmbH & Co. KG <br>Woermannkehre 1, 12359 Berlin, Germany <br>Sitz der Gesellschaft: Berlin, Registergericht: Berlin HRA 6501<br><br>Vertreten durch ihre Komplementaerin:<br>BIOTRONIK Mess- und Therapiegeraete GmbH<br>Sitz der Gesellschaft: Berlin, Registergericht: Berlin HRB 2918<br>Geschaeftsfuehrer: Dr. Max Schaldach, Christoph Boehmer, Dr. Werner Braun, Dr. Lothar Krings<br>*********************************************************************************<br><br>This email and the information it contains including attachments are confidential and meant<br>only for use by the intended recipient(s); disclosure or copying is strictly prohibited. If you are<br>not addressed, but in the possession of this email, please notify the sender immediately.<br></p></font><hr><font size="2"><p><b> Von: </b>Norbert Wegener [norbert.wegener@siemens.com]<br><b> Gesendet: </b>14.02.2009 12:05 CET<br><b> An: </b>FreeRadius users mailing list <freeradius-users@lists.freeradius.org><br><b> Betreff: </b>Re: Migration from TACACS+ to RADIUS<br></p></font><br>
Alan DeKok schrieb:
<blockquote cite="mid:4995CF26.4030906@deployingradius.com" type="cite">
<pre wrap="">Nicholas R. Cappelletti wrote:
</pre>
<blockquote type="cite">
<pre wrap="">In the recent weeks, I have come across some downfalls to using TACACS+ such as no 802.1x authentication, no WPA integration, and the impossible integration into both Kerberos and LDAP.
I hate to sound naive, but like many who need help, I'm new to RADIUS, its configuration, and its capabilities. With that said, I have a few questions concerning functionality that I had with TACACS+ and its equivalence in RADIUS.
1. How granular can I get with command authorization? Currently, TACACS+ is used for VPN authentication and device login, but not all those users should, or need, access to the CLI of the network equipment (We use both Cisco and HP devices). Eventually I would like to use the RADIUS setup for wireless authentication too.
</pre>
</blockquote>
<pre wrap=""><!---->
The hope is that we can add TACACS+ support to FreeRADIUS in a future
version. That will help with migration.
</pre>
</blockquote>
Can this be expected in the foreseeable future?<br>
<br>
Norbert Wegener<br>
<br>
<blockquote cite="mid:4995CF26.4030906@deployingradius.com" type="cite">
<pre wrap="">
Alan DeKok.
-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a>
</pre>
</blockquote>
<br>
</body>
</html>