Technical Tip: Enable configuration of TACACS+ support

[ajoe]

Description

This article describes how to enable configuration of the TACACS+ authentication service on FortiAuthenticator.

Scope

FortiAuthenticator v6.2.0 and above.

Solution

Starting from 6.2.0, the TACACS+ authentication service can be enabled in FortiAuthenticator.

Configuring TACACS authentication requires the following steps:

1. The TACACS+ service needs to be enabled on each FortiAuthenticator network interface individually.
   
   

2. Adding TACACS clients.
3. Creating policies.
4. Creating and assigning authorization rules.

TACACS+ account logs are viewable from the debug logs page (https://<FAC IP>/debug/).

Related documentation:

TACACS service - FortiAuthenticator administration guide.