HP 5920 Series Configuration Manual page 11

Basic RADIUS packet exchange process
Figure 3 illustrates the interactions between a user host, the RADIUS client, and the RADIUS server.
Figure 3 Basic RADIUS packet exchange process
RADIUS operates in the following manner:
The host sends a connection request that carries the user's username and password to the RADIUS
1.
client.
The RADIUS client encrypts the user password by using the MD5 algorithm, the shared key, and
2.
some other information, encapsulates the username and the encrypted password to an
authentication request (Access-Request), and sends the request to the RADIUS server.
The RADIUS server authenticates the username and password. If the authentication succeeds, the
3.
server sends back an Access-Accept packet that contains the user's authorization information. If
the authentication fails, the server returns an Access-Reject packet.
The RADIUS client permits or denies the user according to the authentication result. If it permits the
4.
user, it sends a start-accounting request (Accounting-Request) packet to the RADIUS server.
The RADIUS server returns an acknowledgement (Accounting-Response) packet and starts
5.
accounting.
The user accesses the network resources.
6.
The host requests the RADIUS client to tear down the connection.
7.
The RADIUS client sends a stop-accounting request (Accounting-Request) packet to the RADIUS
8.
server.
The RADIUS server returns an acknowledgement (Accounting-Response) and stops accounting for
9.
the user.
The RADIUS client notifies the user of the termination.
10.
3