Re: Strategy Advice

Hi,

Don't know if this is an issue for you, but: Cisco equipment does not support command authorization via RADIUS (*any* RADIUS...) [for pure business greed reasons]. So if you really need per-command authorization, you'll have to stick with TACACS+ which, sadly, is well catered by ACS.

you can still ditch the ACS and use tac_plus daemon on the same box that freeradius is running on...... alan