An organization is deploying a centralized AAA architecture, configuring RADIUS for 802.1X wireless access and TACACS+ for administration of network infrastructure devices. Which of the following operational characteristics accurately describe these protocols in this design? (Select TWO.)
- TACACS+ encrypts the entire body of the packet, whereas RADIUS encrypts only the password field.Cevap
- TACACS+ separates authentication, authorization, and accounting functions into independent processes, whereas RADIUS combines authentication and authorization.Cevap
- CRADIUS offers granular per-command authorization for CLI sessions, whereas TACACS+ allows authorization only at the initial user session level.
- DTACACS+ uses connectionless UDP port 1812 for communications, whereas RADIUS uses connection-oriented TCP port 49.
Cevap
TACACS+ encrypts the entire payload of the packet while RADIUS encrypts only the password field, and TACACS+ separates AAA functions into independent processes while RADIUS combines authentication and authorization.
TACACS+ encrypts the entire packet body and separates authentication, authorization, and accounting into distinct processes operating over TCP port 49. In contrast, RADIUS encrypts only the password field within packets and combines authentication and authorization over UDP ports 1812/1813.
Adım Adım Çözüm
Anahtar Kavram
RADIUS vs. TACACS+ Protocol Architecture and Features