An infrastructure analyst is performing a security review of an enterprise management network. The organization requires per-command authorization for administrative CLI access on routers and switches, along with full packet payload encryption between network devices and the central AAA server. Which security protocol satisfies these requirements?
- TACACS+, because it encrypts the entire packet payload and separates authentication, authorization, and accounting functions.Cevap
- BRADIUS, because it encrypts the entire packet payload and provides granular per-command authorization capabilities.
- CRADIUS, because it encrypts only the password field while separating authorization from authentication controls.
- DTACACS+, because it encrypts only the password field while operating natively over TCP port 49.
Cevap
TACACS+, because it encrypts the entire packet payload and separates authentication, authorization, and accounting functions.
TACACS+ operates over TCP port 49 and separates the authentication, authorization, and accounting (AAA) functions. This modular separation permits granular authorization checks for every individual administrative command entered on a network device. Furthermore, TACACS+ encrypts the full body of every packet after the standard header, meeting the requirement for complete payload confidentiality.
Adım Adım Çözüm
Anahtar Kavram
TACACS+ vs RADIUS Protocol Characteristics and AAA Separation