Two-Factor Authentication with Cisco ACS 5.2 and Digipass/Identikey Server (Part 2: TACACS+)

TACACS+ is a protocol used in Authentication, Authorization, and Accounting (AAA) that provides many benefits over RADIUS, such as per-command authorization, in device management, especially for Cisco devices. Many organizations are concerned about an unauthorized access to their network devices, which can pose severe security threat, and would like to implement two-factor authentication to strengthen their router/switch access policy. To date, Identikey server does not natively support TACACS+ so trying to incorporate OTP in device login can be quite a challenge.

read more