A dial-up request from the network access server, TACACS+ or RADIUS, is passed to the CiscoSecure ACS for authentication and authorization.

  • The CiscoSecure ACS database authenticates dial-up users.
  • When the request is authenticated by the CiscoSecure ACS user database, an accept or reject message is passed to the client.
  • The client authenticates the domain and a request is passed to Windows NT for authentication.
  • If accepted, the client has access to the domain.

The CiscoSecure ACS user database supports PAP and CHAP for dial-up access.