r/networking

5mo ago

u/ColtonConor

TACACS+ + RADIUS recommendations at scale (Entra ID, IPv6, large device count)

Other

Hey all — looking for some real-world input from people running TACACS+ at scale.

We’re a service provider / MSP with ~100 employees, but we manage ~30,000+ network devices (switches/routers). Most of our gear supports TACACS+, except Mikrotik, which is RADIUS-only.

Current setup

JumpCloud for hosted RADIUS

Integrated with Entra ID (M365)

Not super happy with it:

No TACACS+

No IPv6

Overall feels like we’ve outgrown it

What we need

TACACS+ at scale (primary requirement)

RADIUS (for Mikrotik + access use cases)

Entra ID integration

802.1X with certificates

For HQ wired/wireless + VPN

We use Intune for device management

Seems like we’ll need a proper PKI behind this as well

IPv6 support (a lot of our infra depends on it)

An API for automating device management

We need to add/remove/update devices in bulk (mass onboarding/offboarding, rotating secrets, etc.)

Managing…