TACACS+ Packet Encryption
¨Entire packet after the TACACS+
header is encrypted
¨Relies on a preshared secret stored on both NAS and AAA
server
¨Cipher
text generated by XOR clear-text with concatenated MD5 hashes of session_id,
preshared key, version number, and sequence number