North American Network Operators Group|
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical
Re: TACACS or Radius daemon on Linux
On Tue, Oct 19, 1999 at 03:49:59PM +0000, [email protected] wrote: > We are an ISP running several Cisco 2500s, 5200s, and 5300s as access > servers. Currently we are entering each user into each box. > > We are looking to set up a Red Hat Linux machine as either a TACACS or > Radius server to centrally validate all our users. > > Does anyone have any experience running a TACACS or Radius daemon > on Linux? Where is a good place to find a Linux TACACS or Radius > daemon? > > I heard that although TACACS is a Cisco product, Radius has more > accounting and statistics capability, runs well on Linux, and will > validate for Ciscos. RADIUS runs like a champ on Linux. It should run fine with Ciscos, but my RADIUS experience is primarily with Lucent Portmasters. Contact me off-list for the e-mail address of an owner of another ISP who may be able to help you configure RADIUS on a Cisco NAS. I've been using Merit AAA, but the licensing is rather strict and it's based on old code. Look for the Cistron RADIUS server on rpmfind.net - there are links to both source and binary packages. The most important part of getting RADIUS running on your Linux box is making sure your dictionary file contains vendor-specific entries for the brand of NAS that you are using. If you're using any one of the major brands - Cisco, Bay, Ascend, 3Com/USR - this is a non-issue. Again, I can't help you configure things on the Cisco, but I can help you get things running on the Linux box; feel free to contact me if you need some advice. -- North Shore Technologies Corporation Steven J. Sobol, President & Head Geek 815 Superior Avenue #610 [email protected] Cleveland, Ohio 44114 http://NorthShoreTechnologies.net I'm collecting donations for the Cleveland Indians so they can buy some pitching. If you want to contribute, please contact me.