Description Of Radius; Overview Of Radius; Application Functionality And Scope Of Radius Authentication - Alaxala AX2200S Series Configuration Manual

8 Login Security and RADIUS

8.2 Description of RADIUS

8.2.1 Overview of RADIUS

RADIUS (Remote Authentication Dial In User Service) is a protocol that provides
authentication and accounting services to a Network Access Server (NAS). A NAS is a
device, such as a remote access server or router, that operates as a client of a RADIUS
server. A NAS device requests services such as user authentication and accounting from
the configured RADIUS server. The RADIUS server responds to service requests based on
the data in its management information database. The Switch supports NAS functionality.
When RADIUS is implemented, authentication information such as user passwords used
by the NAS devices and accounting information can be centrally managed by one RADIUS
server. The Switch can request user authentication and accounting services from a
RADIUS server.
The following figure shows the flow of RADIUS authentication.
Figure 8-6 Flow of RADIUS authentication

8.2.2 Application functionality and scope of RADIUS authentication

RADIUS authentication is applied to the following functionality of the Switch:

User authentication for login from a remote operation terminal (hereafter referred to
as login authentication)
RADIUS authentication

Layer 2 authentication (IEEE 802.1X, Web authentication, and MAC-based
authentication)
RADIUS authentication and RADIUS accounting
For details about Layer 2 authentication, see the Configuration Guide Vol. 2.
This subsection describes the scope of support of RADIUS authentication for login
authentication.
86