# TACACS+ (QUX)

Vectra Cognito's TACACS+ Authentication supports the following protocols:

* PAP
* CHAP

NOTE: ASCII, MSCHAPv1 and MSCHAPv2 authentication methods are not currently supported.

### Setup TACACS+ Profile

To configure browse to **Manage - External Authentication -** **TACACS+ Profiles - Create**

Provide the following required fields and the correct protocol.

![](https://4227135129-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FHJ1ltuWFvsArFWtevnRn%2Fuploads%2Fgit-blob-1d228e46ccf2781facb85374eeb5b1155296ba49%2Faee3004a5c624c43c1dee141fbc971b3e82f7483175524889f72eca11380e281.png?alt=media)

Click on **Create** and you should see a message "TACACS profile created!"

Once the Profile has been created you should assign users to this profile.

You can create new users under **Manage - Users** or use the API to migrate users to the new profile. At this time the web interface cannot be used to migrate existing users to a new authentication method without first deleting and recreating the users.

### Steps to migrate existing users to TACACS+ profile via REST API

Send a PATCH request to:

```
URL: https://<mgt_ip>/api/v2/users/<id>
Headers : "Authorization": "Token <api-key>"" "Content-Type": "application/json"
Body: {"account_type": "TACACS", "authentication_profile": "tacacs-profile"}
```

For more information regarding using the REST API go to **Resources - REST API Guide**.