| RADIUS authentication can be configured with the command aaa authentication using a key word of login or ppp. For example, RADIUS can be specified as the means of authentication using the command: aaa authentication login default radius. TACACS+ breaks AAA into three separate steps, while RADIUS combines authentication and authorization into a single exchange of packets. RADIUS supports PAP and CHAP over a serial line using PPP.