TACACS+ (Terminal Access Controller Access-Control System Plus)

TACACS+ is a protocol providing separate authentication, authorization, and accounting for network device administration.

What is TACACS+?

TACACS+ is a protocol that handles authentication, authorization, and accounting (AAA) separately, commonly used for network device administration access.

TACACS+ vs RADIUS

TACACS+ encrypts entire payload (RADIUS only password), TACACS+ separates AAA functions, TACACS+ is TCP (RADIUS is UDP), TACACS+ for device admin, RADIUS for user access.

Common misconceptions

"TACACS+ is Cisco only" — Open protocol
"RADIUS does everything TACACS+ does" — Different strengths
"TACACS+ is obsolete" — Still preferred for device management