For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

simpsjy's avatar
simpsjy
Icon for Nimbostratus rankNimbostratus
Dec 17, 2025

Cisco TACACS+ Config on ISE LTM Pair

I'm trying to add TACACS+ configuration to my ISE LTMs (v17.1.3). We use Active Directory for authentication. The problem is when I try to create the profile, the "type" dropdown does not show "TACA...
announcement
application delivery
deployment
devops
BramsBytes's avatar
BramsBytes
Icon for Cirrus rankCirrus
Dec 17, 2025

I am not sure what you are trying to do? Do you want to add authentication to a Virtual Server? Or do you want to configure TACACS+ as authentication for your F5 itself?

  • simpsjy's avatar
    simpsjy
    Icon for Nimbostratus rankNimbostratus
    Dec 18, 2025

    Thanks for the reply, I meant to update this. Just the Virtual Server. Authentication to the F5 will remain AD.

    • BramsBytes's avatar
      BramsBytes
      Icon for Cirrus rankCirrus
      Dec 18, 2025

      Check: if you want to use User Authentication for a LTM service you'll need APM. 

      Or are you trying to loadbalance TACAS+ across LTM servers in front of your ISE?

      • simpsjy's avatar
        simpsjy
        Icon for Nimbostratus rankNimbostratus
        Dec 18, 2025

        Currently our ISE LTMs use AD for authentication for our UC_Secure wireless network. The LTMs use AD for user authentication to the CLI and SSH. That needs to remain as is.

        We have another group that the network wireless team wants to set up to use TACACS+. It's our understanding we can set up a Virtual Server\Profile\Pool to use TACACS+ for this group to authenticate (https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-local-traffic-manager-remote-authentication-methods/configuring-remote-tacacs-authentication.html#GUID-76C5D090-BF76-4CAF-8960-5F6730A6FECA). The problem is TACACS+ is not an option in the dropdown.