RADIUS (Remote Authentication Dial In User Service) is an authentication and authorization protocol that supports AAA (authentication, authorization, and accounting). It uses a client-server model where a Network Access Server acts as a client of the RADIUS server. Transactions are secured through shared secrets. RADIUS can support various authentication mechanisms like PPP, CHAP, and UNIX login. It defines codes for access requests, accepts, rejects, and accounting requests. Common RADIUS servers include FreeRADIUS, Cisco ACS, Microsoft IAS, and OpenRADIUS.

1. Remote Authentication Dial In User
Service
RADIUS- Packet Example/Vendors
http://www.youtube.com/zarigatongy

2. Key features of RADIUS
• AAA
–Authentication - process of
verifying a person's declared
identity (login/password)
–Authorization - RBAC
–Accounting – IP
http://www.youtube.com/zarigatongy

3. Key features of RADIUS
• Client/Server Model -- A Network Access
Server (NAS) operates as a client of RADIUS
• Network Security - Transactions between the
client and RADIUS server are authenticated
through the use of a shared secret, which is
never sent over the network
• Flexible Authentication Mechanisms - it can
support PPP PAP or CHAP, UNIX login, and
other authentication mechanisms
http://www.youtube.com/zarigatongy

4. RADIUS Codes (decimal) are assigned
as follows:
1.
2.
3.
4.
5.
6.
7.
8.
9.
Access-Request
Access-Accept
Access-Reject
Accounting-Request
Accounting-Response
Access-Challenge
Status-Server (experimental)
Status-Client (experimental)
Reserved
http://www.youtube.com/zarigatongy

5. Attribute
http://www.youtube.com/zarigatongy

6. RADIUS Example
• Examples are presented to illustrate the flow
of packets and use of typical attributes.
http://www.youtube.com/watch?v=zj1ZQFDZ6e
w
http://www.youtube.com/zarigatongy

7. RADIUS Servers
•
•
•
•
•
•
•
•
Free Radius
Cisco ACS
Microsoft IAS
Cistron
Funk
OpenRADIUS
Radiator
Other
http://www.youtube.com/zarigatongy

8. Refrences
• RADIUS RFC's and Attribute definitions
RFC 2548 (attributes)
RFC 2809
RFC 2865 (attributes)
RFC 2866 (attributes)
RFC 2867 (attributes)
RFC 2868 (attributes)
RFC 2869 (attributes)
RFC 2882
RFC 3162 (attributes)
RFC 3576 (attributes)
RFC 3579 (attributes)
RFC 3580 (attributes)
RFC 4675
RFC 4679
RFC 4590 (attributes)
RFC 4818 (attributes)
RFC 4849 (attributes)
RFC 5080
http://www.youtube.com/zarigatongy