For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

taphagreg_90345's avatar
taphagreg_90345
Icon for Nimbostratus rankNimbostratus
Feb 21, 2008

Authorisation if sysadmins using RADIUS or TACACS

I don't seem to be able to fnd much information on this. I have my F5 LTM and GTM and want to control the user lgins using RADIUS or TACACS to set the user privilege level.     However, I am no...
management
monitoring
redcats_65144's avatar
redcats_65144
Icon for Nimbostratus rankNimbostratus
Jun 11, 2009
Below is a statement in Release notes of v10.0.1 regarding Radius/TACACS+. It is clear to me that this feature has been added to the new release. Can anyone kindly share the experience here if you have already tested/used it in production? We would like to upgrade our current production environment just for this feature!

 

Cheers.

 

 

Group-based privilege assignment for RADIUS and TACACS+ user accounts

 

 

For environments that store BIG-IP system user accounts on a remote server, your ability to assign user privileges on a group-wide basis has been expanded to include not only LDAP and Active Directory servers, but also RADIUS and TACACS+. Using the BIG-IP system's remoterole command, you can now assign a user role, partition access, and terminal access to a group of user accounts based on a specific RADIUS or TACACS+ attribute.