Tuesday, August 31, 2021

Aruba ClearPass radius/tacacs+ w/ MFA for switch/router SSH access

Has anyone here successfully set up an MFA mechanism with clearpass for radius or tacacs purposes?

Preferably with Duo or M$ Authenticator.

I've seen examples of freeradius w/ google authenticator where the OTP is appended to the password,

so a solution like this would probably work alright or use push verification.

I've hit page 5 of Google already with little success.

It seems like if I use radius and have duo access gateway as a radius auth source it may work for push verification but I haven't verified that as viable yet.

Keen to hear from those who have made it work.



No comments:

Post a Comment