TACACS+ vs RADIUS
The two AAA protocols network teams use, side by side: what TACACS+ is for, how it separates authentication, authorisation and accounting, per-command authorisation for routers and switches, encryption and transport differences, and when to use each.
CodexBash, , 4 min read
Network engineers manage hundreds of routers, switches and firewalls, and every login to every device should be checked centrally, limited to what that engineer is allowed to do, and recorded. Two protocols dominate that job: RADIUS and TACACS+. They look similar from a distance, both send "may this person in?" to a central server, but they were built for different purposes. This article compares them and explains when each fits.
Sign in to read the rest
The whole 4 minute article is free with an account, along with every problem, lesson and tutorial. No card.