Configuration Guide Configuring RADIUS
Figure 3-3
The RADIUS authentication and authorization process is described as follows:
8. A user enters the user name and password and transmits them to the RADIUS client.
9. After receiving the user name and password, the RADIUS client transmits an authentication request packet to the
RADIUS server. The password is encrypted for transmission. For the encryption method, see RFC2865.
10. The RADIUS server accepts or rejects the authentication request according to the user name and password. When
accepting the authentication request, the RADIUS server also issues authorization information apart from the
authentication acceptance information. The authorization information varies with the type of access users.
The RADIUS accounting process is described as follows:
11. If the RADIUS server returns authentication acceptance information in Step (3), the RADIUS client sends an accounting
start request packet to the RADIUS server immediately.
12. The RADIUS server returns the accounting start response packet, indicating accounting start.
13. The user stops accessing network resources and requests the RADIUS client to disconnect the network connection.
14. The RADIUS client transmits the accounting end request packet to the RADIUS server.
15. The RADIUS server returns the accounting end response packet, indicating accounting end.
16. The user is disconnected and cannot access network resources.