topic Expedition TACACS Support? Cannot get RADIUS to Work! in Expedition Discussions

Expedition TACACS Support? Cannot get RADIUS to Work!

jrtuck — Thu, 02 May 2019 12:09:53 GMT

Why doesn't Expedition have TACACS authentication when all the firewalls and Panorama have it and it works fine? We run Cisco ISE and are having issues with Expedition working with the Cisco ISE RADIUS server. We cannot get users to authenticate. We followed the https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFsCAK and put in the proper VSAs, but it there some else speciaal we have to do to make this work? Thank you.

Re: Expedition TACACS Support? Cannot get RADIUS to Work!

dgildelaig — Mon, 06 May 2019 15:45:05 GMT

We do not share code with Panorama and Firewall devices.

Expedition uses the Radius implementation from the php-radius package.

It is not a feature that many clients use either, so it's priority has never been high to improve.

Could you give some details of the errors you get?