Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Accounting w/ radius?

does accounting w/ radius have less features then tacas+?

  • Other Network Infrastructure Subjects
1 REPLY
Silver

Re: Accounting w/ radius?

Hi Matteson,

TACACS+ encrypts the entire body of the packet but leaves a standard TACACS+ header. Within the header is a field that indicates whether the body is encrypted or not. For debugging purposes, it is useful to have the body of the packets unencrypted. However, during normal operation, the body of the packet is fully encrypted for more secure communications.

RADIUS encrypts only the password in the access-request packet, from the client to the server. The remainder of the packet is unencrypted. Other information, such as username, authorized services, and accounting, could be captured by a third party.

I hope this helps. For more details, pls refer to :

http://www.cisco.com/warp/public/480/10.html

102
Views
0
Helpful
1
Replies
This widget could not be displayed.