How are you handling centralized authentication?

Hey Guys,

How are you guys handling centralized authentication of your VyOS devices? We use Cisco ACS for all of our Cisco gear but I’m not sure what we should use for VyOS gear. From what I can tell it doesn’t support TACACS+ so maybe RADIUS is an option. From the reading and searching I have done it appears that you may have to have each and every username that would have access to a VyOS device placed on the gear. Seems like that would be a headache if true. Any thoughts or guidance would be great.