Class 41 Tacacs Server and Radius Server Configuration
Class 41 Tacacs Server and Radius Server Configuration In Hindi
To provide a centralized management system for the authentication, authorization, and accounting (AAA framework), Access Control Server (ACS) is used. For the communication between the client and the ACS server, two protocols are used namely TACACS+ and RADIUS.
#TACACS+
Terminal Access Controller Access Control System (TACACS+) is a Cisco proprietary protocol that is used for the communication of the Cisco client and Cisco ACS server. It uses TCP port number 49 which makes it reliable.
#RADIUS
Remote Access Dial-In User Service (RADIUS) is an open standard protocol used for the communication between any vendor AAA client and ACS server. If one of the clients or servers is from any other vendor (other than Cisco) then we have to use RADIUS. It uses port number 1812 for authentication and authorization and 1813 for accounting.
Similarities –
The process is started by Network Access Device (NAD – client of TACACS+ or RADIUS). NAD contact the TACACS+ or RADIUS server and transmit the request for authentication (username and password) to the server. First, NAD obtains the username prompt and transmits the username to the server, and then again the server is contacted by NAD to obtain the password prompt and then the password is sent to the server.
The server replies with an access-accept message if the credentials are valid otherwise send an access-reject message to the client. Further authorization and accounting are different in both protocols as authentication and authorization are combined in RADIUS.
Advantages (TACACS+ over RADIUS) –
As TACACS+ uses TCP therefore more reliable than RADIUS.
TACACS+ provides more control over the authorization of commands while in RADIUS, no external authorization of commands is supported.
All the AAA packets are encrypted in TACACS+ while only the passwords are encrypted in RADIUS i.e more secure.
Advantage (RADIUS over TACACS+) –
As it is an open standard therefore RADIUS can be used with other vendor’s devices while because TACACS+ is Cisco proprietary, it can be used with Cisco devices only.
It has more extensive accounting support than TACACS+.
What is radius protocol .
If a single administrator wants to access 100 routers and the local database of the device is used for username and password (authentication) then the administrator has to make the same user account at different times. Also, if he wants to keep a different username and password for the devices then he has to manually change the authentication for the devices. Of course, it’s a hectic task.
To ease this task to some extent, ACS (Access Control Server) is used. ACS provides a centralized management system in which the database of username and password are kept. Also, authorization (means what the user is authorized to do) can be configured. But for this, we have to tell the router to refer to ACS for its decision on authentication and authorization.
Now Get Free Video Courses, E-Books, Event Updates & Class Notes Anywhere Anytime
LEARN ANYWHERE WITH A2IT IOS AND ANDROID APP
https://a2itsoft.com/free-app
Free Download Educational App with Step-by-Step Guide To Learn or Teach in Smarter Way
our Websites:
https://www.a2itonline.com
/ a2itonline