Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Pfsense support tacacs server?

    General pfSense Questions
    3
    8
    733
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      alberto.tovar last edited by

      Hi comunity!, i have planne to integrate a tacacs server to my network, and i wanna know if pfsense support it?

      1 Reply Last reply Reply Quote 0
      • johnpoz
        johnpoz LAYER 8 Global Moderator last edited by

        Support it in what sense? You want to use to auth what exactly with pfsense? Pfsense does support pointing stuff to radius, or for that matter running radius right on pfsense with freeradius.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 22.05 | Lab VMs CE 2.6, 2.7

        1 Reply Last reply Reply Quote 0
        • A
          alberto.tovar last edited by

          Hi @johnpoz i mean, pfsense as a tacacs server

          1 Reply Last reply Reply Quote 0
          • stephenw10
            stephenw10 Netgate Administrator last edited by

            Not directly, no.

            You might be able to do something with the Freeradius module but that's completely untested / unsupported.
            Even if you did though you shouldn't do that. Use a separate authentication server. pfSense is a firewall.

            Steve

            1 Reply Last reply Reply Quote 0
            • A
              alberto.tovar last edited by

              ok man, thanks for the answer, what server would you recommend to me?

              1 Reply Last reply Reply Quote 0
              • johnpoz
                johnpoz LAYER 8 Global Moderator last edited by

                What other types of auth are you going to do? Freeradius is always an option.. NPS if your a windows shop.. Is there any sort of budget to purchase something? Say cisco ISE?

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 22.05 | Lab VMs CE 2.6, 2.7

                1 Reply Last reply Reply Quote 0
                • A
                  alberto.tovar last edited by

                  i have a doubt, ISE is only for cisco devices?

                  1 Reply Last reply Reply Quote 0
                  • johnpoz
                    johnpoz LAYER 8 Global Moderator last edited by johnpoz

                    Not sure where you got that idea.. Look again on ISE
                    https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/compatibility/b_ise_sdt_26.html?referring_site=RE&pos=2&page=https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/compatibility/ise_sdt.html
                    Cisco Identity Services Engine Network Component Compatibility, Release 2.6

                    Again what is the scope of devices your wanting to auth?

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 22.05 | Lab VMs CE 2.6, 2.7

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post