TACACS+
TACACS+ allows peer-to-peer authentication or client-to-server authentication.
MD5-based operator authentication used in TACACS+ is allowed in FIPS mode. To authorize an authentication, use commands such as the following to configure shared secret keys for TACACS+:
device(config)# tacacs-server key <string>
The following parameter makes up the TACACS+ critical security parameters (CSP):
For more information on TACACS+ authentication commands, refer to the
Extreme
NetIron
Routing Configuration Guide.