topic Re: TACACs+ in Network Access Control

TACACs+

gaban — Sun, 10 Mar 2019 14:22:40 GMT

Does tacacs+ encprypt the whole session from logging and doing commands or does it only encrypt the login?

thanks,

gilbert

Re: TACACs+

ywadhavk — Thu, 26 Jun 2003 15:26:58 GMT

Hi Gilbert,

TACACS+ encrypts the whole session.

Snippet from the the below url

--------

TACACS+ encrypts the entire body of the packet but leaves a standard TACACS+ header. Within the header is a field that indicates whether the body is encrypted or not. For debugging purposes, it is useful to have the body of the packets unencrypted. However, during normal operation, the body of the packet is fully encrypted for more secure communications.

------------

http://www.cisco.com/en/US/partner/tech/tk583/tk547/technologies_tech_note09186a0080094e99.shtml

Thanks,

yatin

Re: TACACs+

mhoda — Wed, 02 Jul 2003 04:44:35 GMT

Hi Gilbert,

It encrypts the while session between the NAS ( router) and the tacacs+ server. If you want an unencrypted session, all you need to do is not defining the shared secret key. If you don't define shared secrect, there will not be any hashing involved between the NAS and the tacacs+ server.

Regards,

Mynul