Extended Authentication (XAUTH) lets you deploy IPSec VPNs using TACACS+ or RADIUS as your user authentication method. This feature, which is designed for Cisco VPN Clients, provides a user authentication by prompting the user for username and password and verifies them with the information stored in your TACACS+ or RADIUS database.