Nomadix AG 5000, User Manual, Page: 235 / 286

AG 5000
Quick Reference Guide 231
RADIUS Attributes
RADIUS (Remote Authentication Dial-In User Service) was originally created to
allow remote authentication to the dial-in networks of corporations and dial-up ISPs.
It is defined and standardized by the IETF (Internet Engineering Task Force) and
several RADIUS server packages exist in both the public domain and for commercial
sale.
RADIUS software stores a database of attributes about their valid subscriber base.
For example, usernames, passwords, access privileges, account limits and subscriber
attributes can all be stored in a RADIUS database. RADIUS works in conjunctions
with NAS (Network Access Server) devices to determine if access to the service
network should be granted, and if so, with what privileges.
When a subscriber attempts to access the service provider's network, the AG 5000
delivers a Web page to the subscriber asking for a login name and password. This
information (password) is encrypted and sent across the network to the ISP's
RADIUS server. The RADIUS server decrypts the information and compares it
against its list of valid users. If the subscriber can be authenticated, the RADIUS
server replies to the AG 5000 with a message instructing it to grant access to the
subscriber. Optionally, the RADIUS server can instruct the NAS to perform other
functions; for example, the RADIUS server can tell the AG 5000 what upstream and
downstream bandwidth the subscriber should receive. If RADIUS cannot authenticate
the subscriber, it will instruct the NAS to deny access to the network.
The Nomadix AG 5000 RADIUS functionality can be broken down into the
following categories:
‹
Authentication-Request
‹
Authentication-Reply
‹
Accounting-Request
All subscribers attempting to gain access to the
network are validated by RADIUS.
ag5000_userguide.book Page 231 Friday, March 4, 2005 3:05 PM