3Com 8807 Configuration Manual page 238

238 C 26: AAA
HAPTER AND
Implementing
AAA/RADIUS on a
Switch
RADIUS/HWTACACS P
ROTOCOL
Figure 61 illustrates the basic message exchange procedures.
Figure 61 Basic message exchange procedures
User User
User logs on User logs on
Requests the user for Requests the user for
username username
The user inputs username The user inputs username
Requests the user Requests the user
for password for password
User inputs the password User inputs the password
The user logs on successfully The user logs on successfully
User logs off User logs off
By now, we understand that in the above-mentioned AAA/RADIUS framework,
3Com Series Switches, serving as the user access device (NAS), is the client end of
RADIUS. In other words, the AAA/RADIUS concerning client-end is implemented
on 3Com Series Switches. Figure 62 illustrates the RADIUS authentication network
including 3Com Series Switches.
C
ONFIGURATION
TACACS TACACS
Client Client
Authentication start packet Authentication start packet
Authentication response packet, Authentication response packet,
requesting username requesting username
Authentication continuance packet, Authentication continuance packet,
sending username to the server sending username to the server
Authentication response packet, Authentication response packet,
requesting password requesting password
Authentication continuance packet, Authentication continuance packet,
sending password to the server sending password to the server
Authentication response packet. Authentication response packet.
Authentication succeeds Authentication succeeds
Authorization request packet Authorization request packet
Authorization response Authorization response
packet. Authorization packet. Authorization
succeeds succeeds
Accounting start packet Accounting start packet
Accounting start packet response Accounting start packet response
Accounting stop packet Accounting stop packet
Accounting stop packet response Accounting stop packet response
TACACS TACACS
Server Server