|
|
 |
| AuthAgent TACACS+ |
| Embedded Tacacs+ Client Library |
|
AuthAgent TACACS+ is a lean,
embedded implementation of the Cisco TACACS+ protocol as specified in TACACS+
RFC draft (draft-grant-tacacs). It implements the client side of a client/server
mechanism to carry authentication and authorization information between a
network service granting privileges and a shared server that has the centralized
user and node information required to decide whether such privileges should be
granted. When used in conjunction with protocols that secure the network path,
AuthAgent TACACS+ provides a powerful, yet simple mechanism to authenticate and
authorize access to VPNs, gateway devices, dial-up concentrators, Ethernet
switches and wireless networks.
|
|
|
|
|
|
|
|
|
|
|
|
| The TACACS+ protocol
specifies the information exchange between a device that
provides network access to users (the “TACACS+ client”)
and a device that manages authentication information and
credentials for those users (the “TACACS+ server”).
Having this separation of roles allows for centralized
authentication and administration, which is especially
attractive to embedded devices that need to verify user
credentials and authorize users, without having the
overhead of maintaining and administering a database of
sensitive user information locally on the device.
AuthAgent TACACS+ provides a library to build customized
TACACS+ client applications, and facilitates this
authentication on embedded devices. |
| TACACS+ Security |
| Security for the TACACS+
information exchange is enabled by means of a
pre-configured shared secret known only to two parties:
the client application enabled by AuthAgent TACACS+
(configured using its APIs), and to the TACACS+ server
in use. All transactions between these two endpoints are
encrypted using this shared secret, which itself is
never sent out over the network. AuthAgent TACACS+
encrypts sensitive user data, such as passwords, with a
stream derived from an MD-5 hash, so that only the two
ends of a TACACS+ link can decode them. |
|
 |
Features |
 |
 |
 |
|
 |
Cisco draft-RFC compliant. |
|
|
Includes PAP, CHAP, MS-CHAP and ENABLE client
APIs. |
|
|
Dynamic shutdown and restart (no reboot
required). |
|
|
Can be used standalone, or integrated with other
security protocols and in TeamF1
production-ready solutions. |
|
|
Support for multiple CPU types (x86, PowerPC,
MIPS, ARM/Xscale). |
|
|
Royalty-free full source code distribution. |
|
|
 |
 |
 |
 |
|
|
|
|
 |
|
Special Features |
|
|
Robust interoperability-tested TACACS+ agent library. |
|
|
OS-independent and modular. |
|
|
Integrated into embedded devices with easy-to-use APIs. |
|
|
Supports multiple server configurations. |
|
|
|
|
|
|
