| A dial-up request from the network access server, TACACS+ or RADIUS, is passed to the CiscoSecure ACS for authentication and authorization. The CiscoSecure ACS database authenticates dial-up users. When the request is authenticated by the CiscoSecure ACS user database, an accept or reject message is passed to the client. The client authenticates the domain and a request is passed to Windows NT for authentication. If accepted, the client has access to the domain. The CiscoSecure ACS user database supports PAP and CHAP for dial-up access.