ZyXEL Communications ENC User Manual page 226

Chapter 8 Application
The following table describes some key differences between RADIUS and TACACS+.
Table 107 RADIUS vs TACACS+
Transport Protocol
Encryption
8.4.6.3 802.1x Authentication Overview
The following figure illustrates how a client connecting to a IEEE 802.1x authentication enabled port
goes through a validation process. The device prompts the client for login information in the form of
a user name and password. When the client provides the login credentials, the device sends an
authentication request to a RADIUS server. The RADIUS server validates whether this client is
allowed access to the port.
Figure 176 IEEE 802.1x Authentication Process
226
RADIUS
UDP (User Datagram Protocol)
Encrypts the password sent for
authentication.
1
New Connection
Login Info Request
3
Login Credentials
Session Granted/Denied
TACACS+
TCP (Transmission Control Protocol)
All communication between the client (the
device) and the TACACS server is encrypted.
2
4
Authentication Request
Authentication Reply
5
ENC User's Guide