For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

simpsjy's avatar
simpsjy
Icon for Nimbostratus rankNimbostratus
Dec 17, 2025

Cisco TACACS+ Config on ISE LTM Pair

I'm trying to add TACACS+ configuration to my ISE LTMs (v17.1.3). We use Active Directory for authentication. The problem is when I try to create the profile, the "type" dropdown does not show "TACA...
announcement
application delivery
deployment
devops
simpsjy's avatar
simpsjy
Icon for Nimbostratus rankNimbostratus
Dec 18, 2025

Thanks for the reply, I meant to update this. Just the Virtual Server. Authentication to the F5 will remain AD.

BramsBytes's avatar
BramsBytes
Icon for Cirrus rankCirrus
Dec 18, 2025

Check: if you want to use User Authentication for a LTM service you'll need APM. 

Or are you trying to loadbalance TACAS+ across LTM servers in front of your ISE?

  • simpsjy's avatar
    simpsjy
    Icon for Nimbostratus rankNimbostratus
    Dec 18, 2025

    Currently our ISE LTMs use AD for authentication for our UC_Secure wireless network. The LTMs use AD for user authentication to the CLI and SSH. That needs to remain as is.

    We have another group that the network wireless team wants to set up to use TACACS+. It's our understanding we can set up a Virtual Server\Profile\Pool to use TACACS+ for this group to authenticate (https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-local-traffic-manager-remote-authentication-methods/configuring-remote-tacacs-authentication.html#GUID-76C5D090-BF76-4CAF-8960-5F6730A6FECA). The problem is TACACS+ is not an option in the dropdown.