Technical Note :Aruba Clearpass Dictionary - Configuring TACACS+ for authentication and authorization

[damankwah]

Purpose
This article describes the content of the dictionary entry when integrating Aruba Clearpass TACACS for FortiManager and FortiAnalyzer authentication and authorization
Expectations, Requirements
User should consult Aruba documentation for details on how to create/add a dictionary on Clearpass
Configuration

The kb link below describes the steps on how to configure TACACS+ for authentication and authorization in FortiManager and FortiAnalyzer

https://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=FD41679&sliceId=...

On the server side, Aruba Clearpass requires a dictionary with the following content

  <TacacsServiceDictionaries>

    <TacacsServiceDictionary dispName="fortigate" name="fortigate">

      <ServiceAttribute dataType="String" dispName="service" name="service"/>

      <ServiceAttribute dataType="String" dispName="memberof" name="memberof"/>

      <ServiceAttribute dataType="String" dispName="admin_prof" name="admin_prof"/>

    </TacacsServiceDictionary>

  </TacacsServiceDictionaries>

For details on how to create/add a dictionary on Clearpass, please refer to Aruba Clearpass documentation 

Related Articles

Technical Tip: How to configure TACACS+ for authentication and authorization in FortiManager and For...