When using a central authentication server a client will log in to a network device.
They will be prompted for the credentials but that information is not checked against the local username
and password database but is forwarded to an Anthony cations server such as Cisco ACX using two protocols
radius and Takacs.
So the username and password information is forwarded in encrypted format to the authentication server
and a response is sent back from the Triple-A server either saying that the logon is accepted or not.
That is then passed to the client so the client knows whether the authentication attempt was successful
or not.
Now radius is an open standard protocol that combines authentication and authorization into a single
process.
Once users are theni hated They are also authorized radious uses UDP for authentication and authorization
Takacs is a Siska proprietary protocol that separates the Triple-A services of authentication authorization
and accounting because of that too you could separate authentication from your authorization and accounting
services X also uses TZP rather than UDP Takacs is often used for network devices with radiuses used
for uses Takacs uses.
Port number 49 and radius 16:45 and 18:12 both protocols encrypt the password but Takacs encrypts the
entire packet.
Tech X is great for use with network devices such as Cisco routers and switches because you can authorize
a subset of C-L like humans.
In other words you can centralize which users can issue commands on devices in your network.
As an example only certain users may be allowed to reload a router so you can limit who can do what
on your network devices using Tech X the Cisco atheist server makes us very easy to do.
And as mentioned allows you to centralize your theni cation authorization and accounting services.