A network security administrator is evaluating centralized AAA protocols to manage enterprise infrastructure. The design requires implementing TACACS+ for device administration and RADIUS for network access control. Which TWO of the following characteristics accurately differentiate the operational behavior of TACACS+ from RADIUS? (Select TWO.)
- TACACS+ decouples authentication and authorization into independent processes, whereas RADIUS combines authentication and authorization into a single exchange.Cevap
- TACACS+ encrypts the entire payload of the packet during transmission, whereas RADIUS encrypts only the password attribute within the packet.Cevap
- CTACACS+ relies on UDP port 49 as its primary transport protocol, whereas RADIUS operates exclusively over TCP port 1812.
- DRADIUS provides per-command authorization for router administrative sessions, whereas TACACS+ is primarily used for 802.1X port-based network access.
Cevap
The correct selections state that TACACS+ decouples authentication and authorization while RADIUS combines them, and that TACACS+ encrypts the entire packet body while RADIUS encrypts only the password field.
TACACS+ is a Cisco-proprietary/standardized administrative protocol that operates over TCP port 49, separating authentication and authorization while encrypting the entire packet payload. In contrast, RADIUS is an open standard operating over UDP ports 1812 and 1813 that combines authentication and authorization into single transactions and encrypts only the password attribute.
Adım Adım Çözüm
Anahtar Kavram
AAA Protocol Differentiation (RADIUS vs TACACS+)