The state of TACACS+

Saku Ytti saku at
Mon Dec 30 13:59:48 UTC 2013

On (2013-12-30 08:49 -0500), Christopher Morrow wrote:

> Nor accounting...

I think this is probably sufficient justification for TACACS+. I'm not sure if
command authorization is sufficient, as you can deliver group via radius which
maps to authorized commands.
But if you must support accounting, per-command authorization comes as free
gift more or less.


More information about the NANOG mailing list