Skip to content

tac_plus‐ng: TACACS_PLUS‐over‐TLS1.3

Jump to bottom
Marc Huber edited this page Oct 18, 2025 · 1 revision

tac_plus-ng supports TACACS+ over a TLS1.3-secured tunnel. Interoperability was successfully tested with Cisco's IOS-XE 17.15.4 and 17.18.1a.

Sample tac_plus-ng configuration: https://github.com/MarcJHuber/event-driven-servers/blob/master/tac_plus-ng/sample/tac_plus-ng-tls.cfg

Sample certificate authority and IOX-XE configuration hints: https://github.com/MarcJHuber/event-driven-servers/blob/master/tac_plus-ng/sample/democa/

TLS1.3 with pre-shared keys is supported, but I'm not aware of any third-party implementations, so you're stuck with the still experimental tactester. Setting TLS1.3 PSKs via MAVIS also works.

Clone this wiki locally