Radius and Tacacs

Question 1

What is RADIUS (remote authentication Dial-in User Service

Answer 1

It’s an open standard and uses UDP ports (1812,1813, 1645,1646) it centralizes the Triple A’s (authentication, authorization, accounting (auditing))

Question 2

Radius components

Answer 2

Access Clients, Radius clients, and radius server. The user is the access client, the dial up server VPN servers and 802.1X compliant AP routers. You send a access request and the raidus clients send a radius message to the radius server and the server sends a radius challenge which then your password answers and the radius server performs a triple A

Question 3

What is TACACs?

Answer 3

It is cisco proprietary and separates the AAA roles to different devices and uses a TCP and encryption

Question 4

What is the difference between UDP and TCP?

Answer 4

UDP is a contactless connection protocol so less security and TCP is a contact authentication protocol authorize the user.

Question 5

What is the difference between TACACS and TACACS+

Answer 5

TACACS only encrypts the password and TACACS+ encrypts the whole message and uses a lot more infrastructure