Figure 145: TACACS+
After successful authentication, if TACACS+ accounting is enabled, the TACACS+ client sends
accounting information to the TACACS+ server. When accounting is enabled, the NAS reports user
activity to the TACACS+ server in the form of accounting records. Each accounting record contains
accounting AV pairs. The accounting records are stored on the security server. The accounting data
can then be analyzed for network management and auditing.
The Avaya Ethernet Routing Switch 8800/8600 supports eight users logged in to the chassis
simultaneously with TACACS+.
For more information about TACACS+, see Avaya Ethernet Routing Switch 8800/8600 Security,
NN46205-601.
Encryption of control plane traffic
Control plane traffic encryption involves SSHv1/v2, SCP, and SNMPv3.
Encryption of control plane traffic navigation
•
SSHv1/v2
on page 286
•
SNMP header network address
•
SNMPv3 support
•
Other security equipment
June 2016
on page 286
on page 286
on page 286
Planning and Engineering — Network Design
Comments on this document? infodev@avaya.com
Control plane security
285