Re: Strategy Advice

Stefan Winter wrote:

Don't know if this is an issue for you, but: Cisco equipment does not support command authorization via RADIUS (*any* RADIUS...) [for pure business greed reasons]. So if you really need per-command authorization, you'll have to stick with TACACS+ which, sadly, is well catered by ACS.

There's a tacp2rad program which hasn't been maintained... but it works. Adding that to the FreeRADIUS portfolio wouldn't be hard, if there was a demand for it. Alan DeKok.