Configuration Guide Configuring RADIUS
3 Configuring RADIUS
3.1 Overview
The Remote Authentication Dial-In User Service (RADIUS) is a distributed client/server system.
RADIUS works with the Authentication, Authorization, and Accounting (AAA) to conduct identity authentication on users who
attempt to access a network, to prevent unauthorized access. In RGOS implementation, a RADIUS client runs on a device or
Network Access Server (NAS) and transmits identity authentication requests to the central RADIOUS server, where all user
identity authentication information and network service information are stored. In addition to the authentication service, the
RADIUS server provides authorization and accounting services for access users.
RADIUS is often applied in network environments that have high security requirements and allow the access of remote users.
RADIUS is a completely open protocol and the RADIUS server is installed on many operating systems as a component, for
example, on UNIX, Windows 2000, and Windows 2008. Therefore, RADIUS is the most widely applied security server
currently.
The Dynamic Authorization Extensions to Remote Authentication Dial In User Service is defined in the IETF RFC3576. This
protocol defines a user offline management method. Devices communicate with the RADIUS server through the
Disconnect-Messages (DMs) to bring authenticated users offline. This protocol implements compatibility between devices of
different vendors and the RADIUS server in terms of user offline processing.
In the DM mechanism, the RADIUS server actively initiates a user offline request to a device, the device locates a user
according to the user session information, user name, and other information carried in the request and brings the user offline.
Then, the device returns a response packet that carries the processing result to the RADIUS server, thereby implementing
user offline management of the RADIUS server.
Protocols and Standards
RFC2865: Remote Authentication Dial In User Service (RADIUS)
RFC2866: RADIUS Accounting
RFC2867: RADIUS Accounting Modifications for Tunnel Protocol Support
RFC2868: RADIUS Attributes for Tunnel Protocol Support
RFC2869: RADIUS Extensions
RFC3576: Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS)
3.2 Applications
Providing Authentication,
Authentication, authorization, and accounting are conducted on access users on a
To Next Page
Loading...
Need help?
General
