FortiAuthenticator - licensing of TACACS service for client defined as a subnet.

[Adam_Rimsky]

Hello team. Could you please help me to clarify the FAC licensing of TACACS service? The documentation for VM says that Radius/Tacacs clients are licensed as user licenses/3. I would like to define a single Tacacs client as a subnet /14. Will be consumed just a single license for all network devices which act as Tacacs clients in the /14 subnet (I am fine with just FAC BASE SKU) or do we need a single license for each network device (500 network devices so 1500 users licenses)? Thank you very much.

[pminarik · Accepted solution]

The licensing limits set the maximum number of objects in various configuration tables. A single TACACS+ server object covering and entire /24, or /14, will count as one object.

[Adam_Rimsky]

Thank you, Pavel.