Curious why we're fortunate? Could you elaborate some? <br><br>
<div class="gmail_quote">On Sun, Aug 8, 2010 at 10:01 PM, Michael Lecuyer <span dir="ltr"><<a href="mailto:mjl@iterpacis.org">mjl@iterpacis.org</a>></span> wrote:<br>
<blockquote style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex" class="gmail_quote">TACACS+ uses an MD5 pad based on the session ID, shared secret, TACACS+ version, and packet sequence number. This is XOR'd over the packet. The pad is in multiples of the MD5 hash length.<br>
<br>The header is sent plain text and includes the sequence number, the session ID and version number.<br><br>Encoding and decoding are symmetrical. It is not considered strong encoding.<br><br>We're all fortunate RADIUS doesn't use this to encode packets.<br>
<br>Natr Brazell wrote:<br>
<blockquote style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex" class="gmail_quote">
<div class="im">Thanks,<br> I'm looking into IPSEC at the moment. I'm curious how TACACS+ does their encryption?<br> N<br><br></div>
<div class="im">On Fri, Aug 6, 2010 at 4:09 PM, Alan DeKok <<a href="mailto:aland@deployingradius.com" target="_blank">aland@deployingradius.com</a> <mailto:<a href="mailto:aland@deployingradius.com" target="_blank">aland@deployingradius.com</a>>> wrote:<br>
<br> Natr Brazell wrote:<br> > Is there a way to secure the communication between the radius<br> server and<br> > the NAS especially wrt accounting data?<br><br> IPSec.<br><br> Most NASes implement IPv4, and not much else. "Security" means "don't<br>
run RADIUS over a network where users have access".<br><br> Alan DeKok.<br> -<br> List info/subscribe/unsubscribe? See<br> <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
<br><br><br></div>------------------------------------------------------------------------
<div class="im"><br><br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br></div></blockquote>
<div>
<div></div>
<div class="h5"><br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br></div></div></blockquote></div><br>