UTStarcom iSpirit 3026 Manual page 100

accounting, and authentication server system send back Accounting-Response.
It will inform switch user will leave Internet if who do not want visit Internet, switch send
Accounting-Request to inform authentication server system to stop accounting, accounting info.
will be packed into this packet, and authentication server system send back
Accounting-Response.
3. Users validation ways
RADIUS has following thee validation ways:
PAP (Password Authentication Protocol) . User transers his/her user name and password to
switch. Switch forwards user name and password to RADIUS server through RADIUS protocol
packet, and RADIUS server find data bank, the same name and password are found out, which
means validation passed, instead it is failed.
CHAP（Challenge Handshake Authentication Protocol）. Switch will generate a 16-byte random
code and send to user if who request for visiting Internet. User makes encryption for random
code, password, and other realms and a response will be generated, and then forward user's
name and response to switch. Switch forwards user's name, response, and original 16-byte
random code to RADIUS server. RADIU according to user's name will search for data bank and
obtain the same password with that of supplicant system, and then according to the 16-byte
random code to make encryption, to compare the results with the response, the same results
indicate validation passed, instead it is failed.
EAP （Extensible Authentication Protocol） . In this validation way, switch in fact does not carry out
validation, only as the relay between user and RADIUS server. Switch requests user's name and
forward it to RADIUS server when user requests for visiting Internet, RADIUS server will
generate a 16-byte random code to send to user and meantime store it, user will encrypt for
random code, password, and other realms to generate a response, forward user's name and
response to switch, and which will forward it to RADIUS server. RADIU according to user's name
searchs in data bank from switch end to obtain the same password with supplicant system, and
then according to the 16-byte random code to make encryption, to compare the results with the
response, the same results indicate validation passed, instead it is failed.
Authentication accounting scheme of UTStarcom make use of EAP user validation way.