Three things decide most TACACS+ server evaluations: how granular the command authorization is, whether the server works with every device you own, and whether there is a supported migration path off what you run today. The other nine criteria matter differently depending on the size of your device estate. This checklist weights all twelve, gives […]
AAA server capacity planning comes down to one decision, size for sustained transaction throughput, not the burst peak a datasheet quotes. AAA (authentication, authorization, and accounting) sizing has four steps: measure your current baseline (sustained average transactions per second and your peak-to-average ratio), forecast subscriber and traffic growth over 12–24 months, add a 30–50% headroom […]
TACACS+ accounting is the third “A” in AAA (Authentication, Authorization, and Accounting): the function that records what a network administrator actually did, not just what they were permitted to do. It logs each privileged session and each individual command, with the username, source address, privilege level, and timestamp attached, and sends every record off-device to […]
Network slicing authentication is the secondary EAP procedure defined in 3GPP TS 23.501/TS 23.502 that verifies subscriber entitlement to a specific S-NSSAI before PDU session establishment – distinct from primary 5G-AKA authentication. Per-slice billing requires the AAA server to carry the S-NSSAI as a charging attribute on the Gy interface, generating separate CDRs per […]
