RFC 9950 - A YANG Data Model for Terminal Access Controller Access-Control System Plus (TACACS+)

• Status: Proposed Standard
• Published: March 2026
• Stream: IETF
• Obsoletes: RFC 9105
• Errata: RFC Editor Errata

Abstract

This document defines a Terminal Access Controller Access-Control System Plus (TACACS+) client YANG module that augments the System Management data model defined in RFC 7317. The module allows devices to use TACACS+ servers for centralized Authentication, Authorization, and Accounting (AAA), and can be used to manage TACACS+ over TLS. This document obsoletes RFC 9105.

Contents

• 1. Introduction
• 2. Conventions and Definitions
• 3. Design of the TACACS+ Data Model
• 4. TACACS+ Client Module
• 5. Operational Considerations
• 6. Security Considerations
• 7. IANA Considerations
• 8. References
• Appendix A. Example TACACS+ Authentication Configuration with Shared Secret
• Appendix B. TACACS+ over TLS Examples
• Appendix C. Full Tree
• Acknowledgments
• Authors' Addresses

Related Resources

• Official Text: RFC 9950
• Official Page: RFC 9950 DataTracker
• Errata: RFC Editor Errata