AAA framework: TACACS+ vs RADIUS

TACACS stands for Terminal Access Controller Access-Control System. Plus sign means a newer and updated version of TACACS. Like RADIUS, TACACS+ also uses AAA framework to provide centralized access into a network.
RADIUS was designed to authenticate and log remote network users, while TACACS+ is used for administrator access to network devices like routers and switches.
TACACS+ servers should be deployed in a fully trusted internal network. No direct access should be allowed from untrusted or semi-trusted networks.

Keywords: AAA, Authentication, Authorization, and Accounting, RADIUS, Remote Authentication Dial-In User Service, Access server, remote access control, TACACS+, Terminal Access Controller Access Control System plus,

My topics are organized by playlists:

My most popular videos:

Access Control Fundamentals

Playlist: Basic Cryptography

Advanced Cryptography:
Playlist - IPv4 Basics

[zidanetribal]

12 Dislikes? These 12 people are those ungrateful ones who can't appreciate how brilliant Sunny is. Thanks again Mr. Sunny for these quality lectures.

[Sid]

Sunny is the man! i don't know why courses try to complicate content/fundamentals when they could be easily explained!? Teaching is quite an art form - thank you professor Sunny!

[arisgreek]

Important difference that is not mentioned: TACACS uses different messages for Authentication and Authorization contrary to RADIUS which combines them. This permits TACACS to authorize a user specific authorizations (per command).

[abelmothusi]

By far the best explanation i have come across, very simplified and straight to the point. Thanks Sunny!

[franklinomoaghe]

Wow. This guy is a true teacher. Thank you Sunny. You make it so easy to understand.

[loveLJ]

Thank you! Once again, this video has made a huge difference for me. The chart at the end comparing TACACS+ and RADIUS was particularly helpful.

[claytonmixtape]

I’ve been reading tones of tones of things and never understood the difference between TACACS+ and RADIUS. Man, thank you, you know how to truly explain things.

[obtainiumgaming]

Thank you sir. The first video that gets right down to answering the questions in a easily understandable presentation.

[networktopics]

after looking in so many articles/videos, this is the ONLY one that made understand the deference! thank you Sunny

[toukio_]

Thank you! This explanation is very clear and concise.

[scottscott]

Very nicely explained. Simple to understand and very clear. Thank you.

[sureshpoun]

Thank you Sunny, Nicely explained. Simple to understand and very clear.

[katiekearney]

thank you for this! very straight forward explanation. The comparison table was very helpful.

[rtariq]

Hi, They way you teach, it's lovely. I fully understand TACACS+. Many thanks. God bless you.

[willardmakinishi]

Thank you so much for this tutorial Prof Sunny. I have benefited but my main area of interest was how to configure each one of them individually (Authentication, Authorization and Accountability) in the command line. If you can help on those step by step configs I will be more than grateful. You have really helped me in many areas of my study.

[Wastelander]

Sunny, as usual you’re a godsend and a life saver.

[norizo]

Very clear and easy to understand, specially good for me such the security beginner! I love Sunny's classroom. :)

[Amdamguy]

Very helpful... I like the way you keep it simple... thank you Sunny

[samael]

This breaks down Radius vs Tacacs+ perfectly! Great video.

[jreach]

Thank you for your great work and explanation, sir!