How To: ISE TACACS+ Configuration for Wireless LAN Controllers (WLCs)

December 2015


Terminal Access Controller Access Control System Plus (TACACS+) is a client-server protocol that provides centralized security control for management access to routers and many other types of network access devices. TACACS+ provides these AAA services:

  • Authentication – Who the users are
  • Authorization – What they are allowed to do
  • Accounting – Who did what and when

This document provides configuration examples for TACACS+ with the Cisco Identity Services Engine (ISE) as the TACACS+ server and a Cisco Adaptive Security Appliance (ASA) as the TACACS+ client.


This guide divides the activities into two parts to enable ISE to manage administrative access for Cisco IOS based network devices.

  • Part 1 – Configure ISE for Device Admin
  • Part 2 – Configure Cisco WLC for TACACS+


The information in this document is based on the software and hardware versions below:

  • ISE VMware virtual appliance, Release 2.0
  • WLC with AireOS versions 7.6 & 8.0