300-715 · Question #227
What is a difference between RADIUS and TACACS+?
The correct answer is C. RADIUS combines authentication and authorization functions, and TACACS+ separates them. A fundamental difference is that RADIUS combines authentication and authorization, while TACACS+ separates these functions for more granular control.
Question
What is a difference between RADIUS and TACACS+?
Options
- ARADIUS uses connection-oriented transport, and TACACS+ uses best-effort delivery.
- BRADIUS offers multiprotocol support, and TACACS+ supports only IP traffic.
- CRADIUS combines authentication and authorization functions, and TACACS+ separates them.
- DRADIUS supports command accounting, and TACACS+ does not.
How the community answered
(40 responses)- B3% (1)
- C95% (38)
- D3% (1)
Why each option
A fundamental difference is that RADIUS combines authentication and authorization, while TACACS+ separates these functions for more granular control.
This statement is incorrect; RADIUS uses UDP (connectionless, best-effort), and TACACS+ uses TCP (connection-oriented).
RADIUS combines the authentication and authorization processes into a single exchange, typically sending an 'Access-Request' and receiving an 'Access-Accept' or 'Access-Reject' for both. TACACS+, however, distinctly separates authentication, authorization, and accounting (AAA) functions, allowing for independent policy application for each stage.
Concept tested: RADIUS vs. TACACS+ core differences
Source: https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/guide-c07-734170.html
Topics
Community Discussion
No community discussion yet for this question.