Content

| 9.7 |  | Authentication, Authorization, and Accounting |
| 9.7.2 |  | TACACS+ |

TACACS+ provides the most comprehensive and flexible security configurations when using Cisco routers and switches. TACACS+ is derived from the TACACS and extended TACACS protocols. Both of these older protocols are considered "deprecated" protocols, which means that they are no longer seen as viable solutions. A Cisco-proprietary protocol, TACACS+ is not compatible with TACACS or extended TACACS.

TACACS+ uses TCP to communicate between a TACACS+ server and a TACACS+ client. Use of TACACS+ is required to take advantage of all the features of AAA. Unlike RADIUS, TACACS+ separates the functions of authentication, authorization, and accounting.