TACACs or Radius server?

[mulhollandm]

folks

i want to set up an authentication server for logging onto my routers/switches but i'm not sure which of the above to go for

anyone any suggestions/preferences or installation guides

thanks to anyone taking the time to reply

[sachinraja · Accepted solution]

I would rather go for TACACS here in this case. Cisco ACS 3.0 can be used for this purpose. You can download an evaluation verion (90 days) and try using it. You can then buy a licensed version of the same.

TACACS has a lot of advantages than radius, but it is cisco proprietary. Just have a look at the comparison.

http://www.cisco.com/en/US/products/hw/univgate/ps501/products_case_study_chapter09186a00800ee06a.html#1035719

By all means, TACACS can serve your purpose.

[mulhollandm]

sachin

many thanks for taking the time to respond

[EPHRAIM MANI]

I absolutely agree with Sachin go for TACACS

[mulhollandm]

many thanks for your reply

[robb]

TACACS is excellent, but expensive. If your only looking to provide basic authentication for logins then you may want to consider using the Radius server that's build into Windows 2000/2003. It gives the ability to limit login access by users/groups/time of day....