Table of Contents
Advertisement
Raisecom
ISCOM2600G-HI (A) Series Configuration Guide
Raisecom#show ip arp-rate-limit
Port
---------------------------------------------
gigaethernet1/1/1
gigaethernet1/1/2
gigaethernet1/1/3
gigaethernet1/1/4
gigaethernet1/1/5
gigaethernet1/1/6
gigaethernet1/1/7
gigaethernet1/1/8
gigaethernet1/1/9
10.4 RADIUS
10.4.1 Introduction
Remote Authentication Dial In User Service (RADIUS) is a standard communication protocol
that provides centralized authentication of remote access users. RADIUS uses UDP as the
transmission protocol (port 1812 and port 1813) which has a good instantaneity; at the same
time, RADIUS features good reliability by supporting retransmission mechanism and standby
server mechanism.
RADIUS authentication
RADIUS adopts client/server mode. The network access device is used as client of RADIUS
server. The RADIUS server receives user connection requests, authenticates users, and replies
them with configurations for providing services. In this way, RADIUS can control user to
access devices and network, thus improving network security.
Communication between clients and RADIUS server is authenticated by the shared key,
which will not be transmitted on the network. Besides, any user password to be transmitted
between clients and RADIUS server must be encrypted to prevent it from being intercepted
through sniffing through any insecure network.
RADIUS accounting
RADIUS accounting is used on users that have passed RADIUS authentication. When a user
logs in, the device sends an Account-Start packet to the RADIUS accounting server. During
user login, the device sends Account-Update packets to the RADIUS accounting server
according to the accounting policy. When the user logs off, the device sends an Account-Stop
packet, which contains user online time, to the RADIUS accounting server. The RADIUS
accounting server can record the access time and operations of each user through these
packets.
Rate(Num/Sec)
Raisecom Proprietary and Confidential
Copyright © Raisecom Technology Co., Ltd.
--
20
--
--
--
--
--
--
--
10 Security
417
Advertisement
Table of Contents
