Tripp Lite NGI-M08C4POE8-2 Owner's Manual page 267

7.5 TACACS+
The purpose of this enhancement is to support TACACS+ on the Switch platforms. Terminal
Access Controller Access Control System Plus is a security application that provides centralized
validation of users attempting to gain access to a router, network access server etc. In order for
the TACACS+ feature on the TRIPP LITE products to work it would need a TACACS+ server,
which would typically be a daemon running on a centralized UNIX or windows NT
authentication, authorization and accounting facilities for managing network access points from
a single management service.
Product Features
The TACACS+ implementation will support the following features:
The implementation will conform to version 1.78 of the TACACS+ draft RFC.

Authentication, Authorization and Accounting can be run as well as disabled

independently of each other.
In case TACACS+ authentication fails on account of the server being unreachable the

box can be made to default to a local authentication policy.
TACACS+ packet body encryption will be supported.

Single TACACS+ server will be support.

Multiple connect mode will be support.

Syslog messages will be support.

Functional Description
The TACACS+ implementation will provide the following services:
Authentication:

Complete control of authentication through login and password dialog, challenge and response,
messaging support etc.
Authorization:

Control over user capabilities for the duration of the user session, like setting auto commands,
enforcing restrictions on what configuration commands a user may execute, session duration etc.
Accounting:

Collecting and sending information used for billing, auditing, and reporting to the TACACS+
daemon.
Each of the above mentioned services can be configured and run independent of the others. The
TACACS+ implementation will provide authentication and confidentiality between the router
and the TACACS+ daemon. It runs on TCP port 49.
Application
Remote network access is witnessing a major paradigm shift that from terminal access to LAN
access. Single users want to connect to the corporate network in the same way that they connect
at work i.e. as a LAN user. This places increased emphasis on network access security. As a result
of this network managers are concerned with 3 parameters: authentication, authorization and
accounting. This is where TACACS+ enters into the picture. A typical deployment using
TACACS+ could be as follow:
267