[c-nsp] TACACS vs RADIUS

Jason 'XenoPhage' Frisvold xenophage at godshell.com
Mon Feb 27 15:49:51 EST 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi there,

	I'm contemplating switching from TACACS to RADIUS for admin
authentication on switches and routers.  In part this is so I can
reduce the number of services that have to be maintained, and part has
to do with integration with our existing authentication system.

	Can someone comment on whether RADIUS is a viable replacement for
TACACS?  Will I end up missing some major feature of TACACS?  Will
using RADIUS end up reducing security?

Thanks,

- -- 
- ---------------------------
Jason 'XenoPhage' Frisvold
xenophage at godshell.com
- ---------------------------

"Any sufficiently advanced magic is indistinguishable from technology.\"
- - Niven's Inverse of Clarke's Third Law
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk9L7G8ACgkQO80o6DJ8Uvlc7ACdGbhjITxx5PaCFSBDsO7PrR7P
O1QAoI8vC6OmNxNPYX/2+R838Zyz9qm/
=WJfR
-----END PGP SIGNATURE-----


More information about the cisco-nsp mailing list