
C-1
APPENDIX C TACACS+ Authentication and
Authorization
TACACS+ authentication occurs through a series of
communications between the LX unit and the TACACS+ server.
Once TACACS+ has authenticated a user, the LX unit provides
that user with access to the appropriate network services. The
TACACS+ server maintains a database that contains user
authentication and network service access information.
TACACS+ uses the Transport Control Protocol (TCP) on port 49
to ensure reliable transfer. The entire body of the packet is
encrypted using a series of 16 byte MD5 hashes. The protocol is
split up into 3 distinct categories: Authentication, Authorization,
and Accounting.
Authentication is the process of determining who the user is.
Usually a user is required to enter in a user name and password
to be granted access. Authorization is the process of
determining what the user is able to do. The profile in the
TACACS+ server should have a service of exec and a priv-lvl of
15 in order to access Superuser privileges, otherwise the user
will only be able to be in user mode. Accounting records what
the user has done and generally occurs after authentication and
authorization.
Comentarios a estos manuales