Hirschmann BAT54-F Series - How RADIUS Works; Configuration of RADIUS as Authenticator or NAS

More services
502
12.9 RADIUS
BAT54-Rail/F..
Release 7.54 06/08
12.9.1 How RADIUS works
The authentication process of a client using the authenticator on a RADIUS
server can vary in complexity and is implementation dependent. In a simpli-
fied application, the client sends its registration data to the RADIUS server
via the authenticator and receives back either an "Accept“ or a "Reject“.
In more complicated applications, the RADIUS server can request additional
registration data using what is known as a "Challenge“. The handshake se-
quence looks something like this:
12.9.2 Configuration of RADIUS as authenticator or
NAS
The RADIUS protocol is supported by BAT devices in a range of different ap-
plications. For each of these cases there is a specific set of parameters which
may be configured independently of other applications. There are also gen-
eral parameters which need to be configured for each of these applications.
Not all devices support all applications.


User ID User ID
Accept Accept
Identity?
User ID User ID
Challenge Challenge
Login data Login data
Session key Global key