Roberto Carna wrote: Sent: Monday, May 20, 2013 3:43 PM To: FreeRadius users mailing list Subject: Radius vs Tacacs+

Dear, my chief ask me to choose between Tacacs+ and Radius for switches and Linux SSH user authentication.

This depends primarily on your cryptographic needs, and secondarily on your needs for a consolidated AAA environment. While there are options to provide stronger cryptography for RADIUS, those options are not generally implemented by vendors in switch RADIUS clients. If you are passing your AAA sessions over networks which may leak data, the basic RADIUS secret may not offer the level of protection you need. However, if you feel secure that your control plane is protected, you may want to consider RADIUS as it has better cross-vendor compatibility and also because it can integrate multiple AAA scenarios quite easily, centralizing your AAA services in one place without as much time invested for integration between systems.