Can we configure TACACS+ Server for Switch Management and 802.1X User Authentication on RADIUS server on same EXOS switch?

[Jitendra_Patel]

Can we configure TACACS+ Server for Switch Management and 802.1X User Authentication on RADIUS server on same EXOS switch?
If yes then please share sample Configuration for Summit X440-24-G2 Switch.

[Ty_Izzet]

Per the EXOS User Guide:

"TACACS+ provides many of the same features provided by RADIUS. You cannot use RADIUS
and TACACS+ at the same time."

I have in the past had both configured on the same switch, but used them independently. This is helpful in a migration from TACACS to RADIUS. Both authentication methods were not enabled at the same time.

[Erik_Auerswald]

Please see the below comments, it seems as if EXOS does not support TACACS+ and RADIUS at the same time, not even for different authentication realms.

[Erik_Auerswald]

Hi,

the documentation says regarding enable tacacs:

After they have been enabled, all web and Telnet logins are sent to one of the two TACACS+ servers for login name authentication.

RADIUS can be enabled and disabled independently for switch management and 802.1X, thus I would say that yes, EXOS should be able to use TACACS+ for switch management access authentication and RADIUS for 802.1X at the same time.

Thanks,
Erik