Radius+LDAP for TACACS alternative
Hi People, I am a newbie to Radius, picking up slowly with Radius. Can I use Radius for TACACS replacement ? We have users/groups and Tacacs server provides authentication/authorization for router cmds to these user/groups. Can I achive this using Radius, if yes, please send some links to start. Regards, -Manish __________________________________________________________________________________________ Check out the New Yahoo! Mail - Fire up a more powerful email and get things done faster. (http://advision.webevents.yahoo.com/mailbeta)
Arya, Manish Kumar wrote:
Hi People,
I am a newbie to Radius, picking up slowly with Radius.
Can I use Radius for TACACS replacement ? We have users/groups and Tacacs server provides authentication/authorization for router cmds to these user/groups. Can I achive this using Radius, if yes, please send some links to start.
Regards, -Manish
Hi Manish, I believe http://www-128.ibm.com/developerworks/linux/library/l-radius/ should cover most of your questions. Note however that you cannot perform command-level audit logging with RADIUS as with TACACS. If this is not important to you, then you're pretty much all set. Cheers, -- James Wakefield, Unix Administrator, Information Technology Services Division Deakin University, Geelong, Victoria 3217 Australia. Phone: 03 5227 8690 International: +61 3 5227 8690 Fax: 03 5227 8866 International: +61 3 5227 8866 E-mail: james.wakefield@deakin.edu.au Website: http://www.deakin.edu.au
James Wakefield <jamesw@deakin.edu.au> wrote:
Note however that you cannot perform command-level audit logging with RADIUS as with TACACS. If this is not important to you, then you're pretty much all set.
There's a preliminary "tacacs to radius" gateway on bugs.freeradius.org. It should really be extended to do authorization/authentication, and added to the server source. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (3)
-
Alan DeKok -
Arya, Manish Kumar -
James Wakefield