|
Overview :
Aricent TACACS+ (Terminal Access Controller Access Control System) is a portable software implementation of the TACACS+ Client protocol defined in draft-grant-tacacs-02.txt for providing Network Access Security (NAS). NAS ensures secure access from remotely connected users. Aricent TACACS+ implements the TACACS+ Client and provides the Authentication, Authorization and Accounting (AAA) functionalities.
Figure 1. Aricent TACACS+ Architecture
Features :
- Provides access control for network devices via one or more centralized servers.
- Uses TCP for transport to ensure reliable delivery.
- Supports Authentication, Authorization and Accounting as separate and independent functions.
- Supports inbound authentication, outbound authentication and change password request for the Authentication service.
- Supports MD5 encryption of packets between the client and server.
- Supports ASCII, PAP, CHAP, MSCHAP and ARAP authentication protocols.
- Provides user configurable support for single or multiple connections for sessions between the client and the server.
- Supports all services defined in the specification that is requesting for authentication - simple login, enable service, PPP, ARAP, PT, RCMD, X25, NASI, and FWPROXY.
- Provides flexible message based or functional interface for user applications.
- Provides complete support for SNMP-based management by implementing the proprietary MIB.
- Provides complete support for management through CLI. It also supports integration with third party CLI frameworks.
- Conforms to Future Software Architecture for Portability (FSAP2), thus ensuring highly portable code, which uses flexible buffer and timer management libraries.
Benefits :
Aricent TACACS+ reduces the time to market for OEMs and VARs who wish to incorporate the TACACS+ functionality into their switching/routing devices.
|
