TACACS+ to authenticate and authorize end Users in a network

[orimbatomeizi]

Hello

I just want to ask if there are any alternatives to 802.1x or web based authentication and authorization with TACACS+ only.

I can not use RADIUS although i have to authenticate end users with TACACS+ to allow them to use the network services like internet, mail, etc... As far i see TACACS+ is for device admnistration only but i was told that it can authenticate end users two instead of radius.

Thank you

[balaji.bandi]

If you like user to authenticate get to internet and allow to access internal resources.

as per i know you have only option 802.1x  deployment. (this can be done using Wired and Wireless)

https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Security/TrustSec_1-99/Dot1X_Deployment/Dot1x_Dep_Guide.html

not sure how is your network what network devices you have in place to explore any other option, most time AAA is the only method.

[orimbatomeizi]

Thank you for your answer... It is for research purposes for my network class project. I'm stuck with Tacacs+

[balaji.bandi]

some compare will help you here  for your research :

https://www.cisco.com/c/en/us/support/docs/security-vpn/remote-authentication-dial-user-service-radius/13838-10.html

[orimbatomeizi]

---

Thank you

[Flavio Miranda]

Hi

 They are basically the same.  The idea is the same, validate users against some user database and permit access or deny access. 

TACACS+                                                                                     RADIUS
Cisco proprietary protocol                                                            open standard protocol
It uses TCP as a transmission protocol                                          It uses UDP as a transmission protocol
It uses TCP port number 49.                                                        It uses UDP port number 1812 for authentication and authorization and 1813 for accounting.
Authentication, Authorization, and Accounting are separated        in TACACS+. Authentication and Authorization are combined in RADIUS.
All the AAA packets are encrypted. Only the password is encrypted while the

[orimbatomeizi]

Thanks...

But tacacs+ is not 802.1x capable or web based authentication, based on what i see