You need Radius Server software; there
are commercially available versions,
or some free packages. Cisco's package
is CiscoSecure (TACACs or RADIUS).
http://www/univercd/cc/td/doc/product/access/acs_soft/cs_unx/csu23ug/overview.htm#xtocid1697421
The RADIUS (or TACACS) authentication
cannot be done on the NAS; local NAS
authentication would not use either
protocol.