What is a secure way to log into devices through the internet using AD credentials?

[jasonww04]

I want to have everyone sign into devices using their company usernames that are stored in Active Directory. RADIUS doesn't help because the credentials are sent unencrypted. What are some options for encrypting credentials traveling from a router to AD?

[Marvin Rhoads · Accepted solution]

RADIUS encrypts the passwords,

TACACS+ encrypts the credentials and then some.

Reference.