3Com 8800 Configuration Manual page 591

3Com Switch 8800 Configuration Guide
The TACACS server sends back an authentication response, requesting for the
login password. Upon receiving the response, the TACACS client requests the
user for the login password.
After receiving the login password, the TACACS client sends an authentication
continuance packet carrying the login password to the TACACS server.
The TACACS server sends back an authentication response indicating that the
user has passed the authentication.
The TACACS client sends the user authorization packet to the TACACS server.
The TACACS server sends back the authorization response, indicating that the
user has passed the authorization.
Upon receipt of the response indicating an authorization success, the TACACS
client pushes the configuration interface of the switch to the user.
The TACACS client sends a start-accounting request to the TACACS server.
The TACACS server sends back an accounting response, indicating that it has
received the start-accounting request.
The user logs off; the TACACS client sends a stop-accounting request to the
TACACS server.
The TACACS server sends a stop-accounting response to the client, which
indicates it has received the stop-accounting request packet.
The following figure illustrates the basic message exchange procedures:
Figure 40-2 illustrates the basic message exchange procedures.
Chapter 40 AAA and RADIUS/TACACS+ Protocol Con
40-4
figuration