Terminology - HP ProCurve Switch 6120G/XG Manual

RADIUS Authentication, Authorization, and Accounting

Terminology

Terminology

AAA: Authentication, Authorization, and Accounting groups of services pro-
vided by the carrying protocol.
CHAP (Challenge-Handshake Authentication Protocol): A challenge-
response authentication protocol that uses the Message Digest 5 (MD5)
hashing scheme to encrypt a response to a challenge from a RADIUS server.
CoS (Class of Service): Support for priority handling of packets traversing
the switch, based on the IEEE 802.1p priority carried by each packet. (For
more on this topic, refer to the "Overview" section in the "Quality of Service
(QoS)" chapter in the Advanced Traffic Management Guide for your switch.)
EAP (Extensible Authentication Protocol): A general PPP authentication
protocol that supports multiple authentication mechanisms. A specific
authentication mechanism is known as an EAP type, such as MD5-Challenge,
Generic Token Card, and TLS (Transport Level Security).
EXEC Session: a service (EXEC shell) granted to the authenticated login
user for doing management operations on the ProCurve device.
Host: See RADIUS Server.
NAS (Network Access Server): In this case, a ProCurve switch configured
for RADIUS security operation.
RADIUS (Remote Authentication Dial In User Service): a protocol for
carrying authentication, authorization, and accounting information between
a Network Access Server and shared AAA servers in a distributed dial-in
networking environment.
RADIUS Client: The device that passes user information to designated
RADIUS servers.
RADIUS Host: See RADIUS server.
RADIUS Server: A server running the RADIUS application you are using on
your network. This server receives user connection requests from the switch,
authenticates users, and then returns all necessary information to the switch.
For the ProCurve switch, a RADIUS server can also perform accounting
functions. Sometimes termed a RADIUS host.
Shared Secret Key: A text value used for encrypting data in RADIUS packets.
Both the RADIUS client and the RADIUS server have a copy of the key, and
the key is never transmitted across the network.
5-5