Terminal Access Controller Access Control System Plus
(TACACS+) is an authentication protocol that allows an NAS to communicate with
an authentication server to determine if a user has access to the network.
TACACS+, a new protocol developed by Cisco, replaces two earlier
industry standards: TACACS and XTACACS (Extended Terminal Access Controller
Access Control System). TACACS+ isn’t compatible with the two older protocols.
Cisco has submitted TACACS+ protocol specification in a draft RFC to the IETF
for development of a standard and for those customers interested in developing
their own TACACS+ software.
TACACS+ server services are maintained in a database on a
TACACS+ daemon running on a Windows 2000/NT or UNIX host. Cisco’s servers
supporting TACACS+ include CiscoSecure ACS for Windows, CiscoSecure UNIX, and
Cisco Access Registrar. Cisco Access Servers (Cisco Secure ACS) can implement
both TACACS+ and RADIUS. The underlying architecture of TACACS+ protocol
complements the AAA architecture.