Strategy Advice

[Alan DeKok]

Stefan Winter wrote:
> Don't know if this is an issue for you, but: Cisco equipment does not
> support command authorization via RADIUS (*any* RADIUS...) [for pure
> business greed reasons]. So if you really need per-command
> authorization, you'll have to stick with TACACS+ which, sadly, is well
> catered by ACS.

  There's a tacp2rad program which hasn't been maintained... but it works.

  Adding that to the FreeRADIUS portfolio wouldn't be hard, if there was
a demand for it.

  Alan DeKok.