Describe the TACACS+ AAA protocol, and detail how it differs from RADIUS.

What will be an ideal response?

ANSWER: TACACS+ (Terminal Access Controller Access Control System Plus), offers network administrators the option of separating the authentication, authorization, and auditing capabilities. For instance, TACACS1 might provide access and accounting functions, but use another technique, such as Kerberos, to authenticate users. TACACS+ differs from RADIUS in that it:
* Relies on TCP, not UDP, at the Transport layer.
* Was developed by Cisco Systems, Inc., for proprietary use.
* Is typically installed on a router or switch, rather than on a server.
* Encrypts all information transmitted for AAA (RADIUS only encrypts the password).