HP HP ProCurve Series 6600, Access Security Manual

Page: 238 / 778

6-4
RADIUS Authentication, Authorization, and Accounting
Terminology
Terminology
AAA: Authentication, Authorization, and Accounting groups of services pro-
vided by the carrying protocol.
CHAP (Challenge-Handshake Authentication Protocol): A challenge-
response authentication protocol that uses the Message Digest 5 (MD5)
hashing scheme to encrypt a response to a challenge from a RADIUS server.
CoS (Class of Service): Support for priority handling of packets traversing
the switch, based on the IEEE 802.1p priority carried by each packet. (For
more on this topic, refer to the “Overview” section in the “Quality of Service
(QoS)” chapter in the
Advanced Traffic Management Guide for your switch.)
EAP (Extensible Authentication Protocol): A general PPP authentication
protocol that supports multiple authentication mechanisms. A specific
authentication mechanism is known as an EAP type, such as MD5-Challenge,
Generic Token Card, and TLS (Transport Level Security).
EXEC Session: a service (EXEC shell) granted to the authenticated login
user for doing management operations on the HP device.
Host: See RADIUS Server .
NAS (Network Access Server): In this case, a HP switch configured for
RADIUS security operation.
RADIUS (Remote Authentication Dial In User Service):
a protocol for
carrying authentication, authorization, and accounting information between
a Network Access Server and shared AAA servers in a distributed dial-in
networking environment.
RADIUS Client: The device that passes user information to designated
RADIUS servers.
RADIUS Host: See RADIUS server.
RADIUS Server: A server running the RADIUS application you are using on
your network. This server receives user connection requests from the switch,
authenticates users, and then returns all necessary information to the switch.
For the HP switch, a RADIUS server can also perform accounting functions.
Sometimes termed a
RADIUS host .