Question

Difficulty: EasyAAA Framework and Authentication Methods

A network administrator is implementing TACACS+ for centralized administration of network routers and switches. Which TWO of the following are distinct operational characteristics of the TACACS+ protocol?

  1. Encrypts the entire payload of the packetAnswer
  2. B
    Uses UDP ports 1812 and 1813 for transport communication
  3. Operates over TCP port 49 for transportAnswer
  4. D
    Encrypts only the user password field during transmission

Answer

TACACS+ encrypts the entire payload of the packet and operates over TCP port 49.
TACACS+ is designed for network device administration, encrypting the entire packet payload and using TCP port 49 for reliable transport.

Step-by-Step Solution

1
Determine the transport layer protocol and port number for TACACS+.
TACACS+ uses TCP port 49.
Connection-oriented TCP ensures reliable transmission of administrative commands and AAA traffic.
2
Identify the encryption capability of TACACS+ compared to RADIUS.
TACACS+ encrypts the entire packet payload.
Full packet payload encryption protects administrative credentials and command data from eavesdropping.

Key Concept

TACACS+ AAA Protocol Characteristics
Rate this question