3Com 4210 PWR Configuration Manual page 241

Users: This database stores information about users (such as user name,
■
password, protocol adopted and IP address).
Clients: This database stores information about RADIUS clients (such as shared
■
key).
Dictionary: The information stored in this database is used to interpret the
■
attributes and attribute values in the RADIUS protocol.
Figure 77 Databases in a RADIUS server
RADIUS servers
User
In addition, a RADIUS server can act as a client of some other AAA server to
provide authentication or accounting proxy service.
Basic message exchange procedure in RADIUS
The messages exchanged between a RADIUS client (a switch, for example) and a
RADIUS server are verified through a shared key. This enhances the security. The
RADIUS protocol combines the authentication and authorization processes
together by sending authorization information along with the authentication
response message. Figure 78 depicts the message exchange procedure between
user, switch and RADIUS server.
Figure 78 Basic message exchange procedure of RADIUS
Host
The user inputs the user
( 1 )
name and password
( 6 ) The user begins to access resources
( 9 ) Inform the user the access is ended
Clients Dictionary
RADIUS Client
(4 )
( 5 )
( 7 ) Accounting-Request (stop)
( 8 ) Accounting-Response
Introduction to AAA Services
RADIUS Server
( 2 ) Access -Request
( 3 ) Access -Accept
Accounting-Request (start)
Accounting-Response
239