TACACS+ — Encrypted, Separated AAA for Device Admin

Cisco’s device-administration AAA protocol: TCP 49, entire payload encrypted, and the three A’s are separate decisions — you can authenticate via TACACS+ while authorising commands elsewhere. That command-level authorization is why ENCOR prefers it for CLI access. aaa new-model tacacs server TAC1 address ipv4 10.10.10.20 key cisco123 aaa authentication login default group tacacs+ local aaa […]