The state of TACACS+

Saku Ytti saku at ytti.fi
Mon Dec 30 13:59:48 UTC 2013


On (2013-12-30 08:49 -0500), Christopher Morrow wrote:

> Nor accounting...

I think this is probably sufficient justification for TACACS+. I'm not sure if
command authorization is sufficient, as you can deliver group via radius which
maps to authorized commands.
But if you must support accounting, per-command authorization comes as free
gift more or less.

-- 
  ++ytti




More information about the NANOG mailing list