
Storing Security Associations in AAA 101
RADIUS uses User Datagram Protocol (UDP) as the transport mechanism and only encrypts
the password portion of packets, with the remainder of the packet sent in the clear text. Thus,
RADIUS is considered lighter-weight than TACACS+, which uses Transmission Control
Protocol (TCP) (and is recommended for use in Mobile IP deployments over TACACS+.)
(TACACS+ is described in the next section of this chapter.) However, because the packet is not
encrypted, the security association transits the network in the clear. If enhanced security is
necessary, IP Security (IPSec) can protect the RADIUS traffic.
After configuring ...