On Wed, Apr 29, 1998 at 04:13:06AM -0700, Sekou Kande wrote:
> Hi,
> 
> I have a Sun Box with Cisco Router configurated by 
> someone else with "Tac_plus" ppp connection.  
> 
> I am installing RH5.0 and I want to use "mgetty" ppp connection.
> 
> Would "mgetty" work for me or I must install "Tac_Plus" in order
> for my ppp to work since Cisco and the sun box using "Tac_Plus"?
> 
> I want to install or setup ppp to receive 
> and handle dial in connections (ppp Server)
> but I don't know how. This my first Linux or UNIX installation. 

I am not sure exactly waht you are getting at here but here goes anyway :)

tac_plus is the Cisco TACAS+ AAA authentication server deamon, its an
alternative to RADIUS. Basically you setup your dialin server be it a Cisco
router or an O/S (eg Linux) based server to hand off the password checking for
dialin connections to the TACACS+ server. It can also do some fancy stuff like
establish what services etc you can use.

>From the dialin clients point of view there is no difference to connecting to
a standard ppp login server. You just use PAP or CHAP or whatever is
configured on the server. YOU DON'T NEED AND TACACS+ SOFTWARE ON THE CLIENT.

It is possible to setup a Linux dialin server to use TACACS+ for
authentication but if this is going to replace the Cisco then don't bother
unless you have hundres of dialin users. The main point of AAA authentication
servers like RADIUS and TACACS+ is to have one central server where you can
configure the accounts for lots of dialin servers and so make them easier to
manage.

If you want the source code for TACACS+ its on ftp.cisco.com, its freeware but
not GPL. I compiled an older version of it a couple of years ago with not too
many problems on RH 4.1. The syntax for its config file is a little obscure
though.

Pat Colbeck (Cisco CCIE)

 


-- 
  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com/RedHat-FAQ /RedHat-Errata /RedHat-Tips /mailing-lists
         To unsubscribe: mail [EMAIL PROTECTED] with 
                       "unsubscribe" as the Subject.

Reply via email to